Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-33850 (GCVE-0-2023-33850)
Vulnerability from cvelistv5
Published
2023-08-22 20:31
Modified
2024-10-03 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-203 - Observable Discrepancy
Summary
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
References
Impacted products
Vendor | Product | Version | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
► | IBM | TXSeries for Multiplatforms |
Version: 8.1, 8.2, 9.1 |
|||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T15:54:12.732Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.ibm.com/support/pages/node/7010369" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.ibm.com/support/pages/node/7022413" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.ibm.com/support/pages/node/7022414" }, { "tags": [ "vdb-entry", "x_transferred" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132" } ], "title": "CVE Program Container" }, { "affected": [ { "cpes": [ "cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "product": "txseries_for_multiplatform", "vendor": "ibm", "versions": [ { "status": "affected", "version": "8.1" }, { "status": "affected", "version": "8.2" }, { "status": "affected", "version": "9.1" } ] }, { "cpes": [ "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*" ], "defaultStatus": "unaffected", "product": "cics_tx", "vendor": "ibm", "versions": [ { "status": "affected", "version": "11.1" }, { "status": "affected", "version": "10.1" } ] }, { "cpes": [ "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*" ], "defaultStatus": "unaffected", "product": "cics_tx", "vendor": "ibm", "versions": [ { "status": "affected", "version": "11.1" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2023-33850", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-10-03T19:06:38.589742Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-10-03T19:11:06.469Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "TXSeries for Multiplatforms", "vendor": "IBM", "versions": [ { "status": "affected", "version": "8.1, 8.2, 9.1" } ] }, { "defaultStatus": "unaffected", "product": "CICS TX Standard", "vendor": "IBM", "versions": [ { "status": "affected", "version": "11.1" } ] }, { "defaultStatus": "unaffected", "product": "CICS TX Advanced", "vendor": "IBM", "versions": [ { "status": "affected", "version": "10.1, 11.1" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cspan style=\"background-color: rgb(204, 217, 226);\"\u003eIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.\u003c/span\u003e" } ], "value": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-203", "description": "CWE-203 Observable Discrepancy", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-09-27T13:50:22.398Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://www.ibm.com/support/pages/node/7010369" }, { "tags": [ "vendor-advisory" ], "url": "https://www.ibm.com/support/pages/node/7022413" }, { "tags": [ "vendor-advisory" ], "url": "https://www.ibm.com/support/pages/node/7022414" } ], "source": { "discovery": "UNKNOWN" }, "title": "IBM GSKit-Crypto information disclosure", "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2023-33850", "datePublished": "2023-08-22T20:31:25.923Z", "dateReserved": "2023-05-23T00:31:59.438Z", "dateUpdated": "2024-10-03T19:11:06.469Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-33850\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2023-08-22T21:15:07.837\",\"lastModified\":\"2024-11-21T08:06:04.500\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-203\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-203\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D5EA02F-AA81-4101-9CE2-46ED4DE76B25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:txseries_for_multiplatform:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"569BF866-989C-4BF4-B80E-962F8979FD8B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E492C463-D76E-49B7-A4D4-3B499E422D89\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:txseries_for_multiplatform:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB032B5B-3B05-4809-8BF2-E08255E19475\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F480AA32-841A-4E68-9343-B2E7548B0A0C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E492C463-D76E-49B7-A4D4-3B499E422D89\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*\",\"matchCriteriaId\":\"66EEC046-128D-4555-8C9A-3C02300145B5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*\",\"matchCriteriaId\":\"73BBDE39-E8CF-416C-838D-046ADDA011F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*\",\"matchCriteriaId\":\"A9D7FDA3-EE60-453B-8651-686B9D28071F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7010369\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/7022413\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/7022414\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/257132\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.ibm.com/support/pages/node/7010369\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/7022413\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/7022414\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7010369\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/7022413\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/7022414\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/257132\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T15:54:12.732Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-33850\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-03T19:06:38.589742Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*\"], \"vendor\": \"ibm\", \"product\": \"txseries_for_multiplatform\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.1\"}, {\"status\": \"affected\", \"version\": \"8.2\"}, {\"status\": \"affected\", \"version\": \"9.1\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*\"], \"vendor\": \"ibm\", \"product\": \"cics_tx\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1\"}, {\"status\": \"affected\", \"version\": \"10.1\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*\"], \"vendor\": \"ibm\", \"product\": \"cics_tx\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1\"}], \"defaultStatus\": \"unaffected\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-03T19:10:45.702Z\"}}], \"cna\": {\"title\": \"IBM GSKit-Crypto information disclosure\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"IBM\", \"product\": \"TXSeries for Multiplatforms\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.1, 8.2, 9.1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"IBM\", \"product\": \"CICS TX Standard\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"IBM\", \"product\": \"CICS TX Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.1, 11.1\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7010369\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/7022413\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/7022414\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cspan style=\\\"background-color: rgb(204, 217, 226);\\\"\u003eIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.\u003c/span\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-203\", \"description\": \"CWE-203 Observable Discrepancy\"}]}], \"providerMetadata\": {\"orgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"shortName\": \"ibm\", \"dateUpdated\": \"2024-09-27T13:50:22.398Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2023-33850\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-03T19:11:06.469Z\", \"dateReserved\": \"2023-05-23T00:31:59.438Z\", \"assignerOrgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"datePublished\": \"2023-08-22T20:31:25.923Z\", \"assignerShortName\": \"ibm\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
suse-su-2024:0605-1
Vulnerability from csaf_suse
Published
2024-02-23 15:31
Modified
2024-02-23 15:31
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
Security fixes:
- CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).
- CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).
- CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).
- CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).
- CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).
- CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).
- CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).
- CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).
Patchnames
SUSE-2024-605,SUSE-SLE-SDK-12-SP5-2024-605,SUSE-SLE-SERVER-12-SP5-2024-605
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for java-1_8_0-ibm", "title": "Title of the patch" }, { "category": "description", "text": "This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]\n\nSecurity fixes:\n\n- CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).\n- CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).\n- CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).\n- CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).\n- CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).\n- CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).\n- CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).\n- CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-605,SUSE-SLE-SDK-12-SP5-2024-605,SUSE-SLE-SERVER-12-SP5-2024-605", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0605-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:0605-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240605-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:0605-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/018004.html" }, { "category": "self", "summary": "SUSE Bug 1218903", "url": "https://bugzilla.suse.com/1218903" }, { "category": "self", "summary": "SUSE Bug 1218905", "url": "https://bugzilla.suse.com/1218905" }, { "category": "self", "summary": "SUSE Bug 1218906", "url": "https://bugzilla.suse.com/1218906" }, { "category": "self", "summary": "SUSE Bug 1218907", "url": "https://bugzilla.suse.com/1218907" }, { "category": "self", "summary": "SUSE Bug 1218908", "url": "https://bugzilla.suse.com/1218908" }, { "category": "self", "summary": "SUSE Bug 1218909", "url": "https://bugzilla.suse.com/1218909" }, { "category": "self", "summary": "SUSE Bug 1218911", "url": "https://bugzilla.suse.com/1218911" }, { "category": "self", "summary": "SUSE Bug 1219843", "url": "https://bugzilla.suse.com/1219843" }, { "category": "self", "summary": "SUSE CVE CVE-2023-33850 page", "url": "https://www.suse.com/security/cve/CVE-2023-33850/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20918 page", "url": "https://www.suse.com/security/cve/CVE-2024-20918/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20919 page", "url": "https://www.suse.com/security/cve/CVE-2024-20919/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20921 page", "url": "https://www.suse.com/security/cve/CVE-2024-20921/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20926 page", "url": "https://www.suse.com/security/cve/CVE-2024-20926/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20932 page", "url": "https://www.suse.com/security/cve/CVE-2024-20932/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20945 page", "url": "https://www.suse.com/security/cve/CVE-2024-20945/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20952 page", "url": "https://www.suse.com/security/cve/CVE-2024-20952/" } ], "title": "Security update for java-1_8_0-ibm", "tracking": { "current_release_date": "2024-02-23T15:31:04Z", "generator": { "date": "2024-02-23T15:31:04Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:0605-1", "initial_release_date": "2024-02-23T15:31:04Z", "revision_history": [ { "date": "2024-02-23T15:31:04Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.i586", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.i586", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.ppc64le", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.ppc64le", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.ppc64le", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.ppc64le", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390" } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390x", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390x", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.x86_64", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.x86_64", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-30.120.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product": { "name": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-sdk:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP5", "product": { "name": "SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-33850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-33850" } ], "notes": [ { "category": "general", "text": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-33850", "url": "https://www.suse.com/security/cve/CVE-2023-33850" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2023-33850", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "important" } ], "title": "CVE-2023-33850" }, { "cve": "CVE-2024-20918", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20918" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20918", "url": "https://www.suse.com/security/cve/CVE-2024-20918" }, { "category": "external", "summary": "SUSE Bug 1218907 for CVE-2024-20918", "url": "https://bugzilla.suse.com/1218907" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20918", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "important" } ], "title": "CVE-2024-20918" }, { "cve": "CVE-2024-20919", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20919" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20919", "url": "https://www.suse.com/security/cve/CVE-2024-20919" }, { "category": "external", "summary": "SUSE Bug 1218903 for CVE-2024-20919", "url": "https://bugzilla.suse.com/1218903" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20919", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "moderate" } ], "title": "CVE-2024-20919" }, { "cve": "CVE-2024-20921", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20921" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20921", "url": "https://www.suse.com/security/cve/CVE-2024-20921" }, { "category": "external", "summary": "SUSE Bug 1218905 for CVE-2024-20921", "url": "https://bugzilla.suse.com/1218905" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20921", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "moderate" } ], "title": "CVE-2024-20921" }, { "cve": "CVE-2024-20926", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20926" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20926", "url": "https://www.suse.com/security/cve/CVE-2024-20926" }, { "category": "external", "summary": "SUSE Bug 1218906 for CVE-2024-20926", "url": "https://bugzilla.suse.com/1218906" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20926", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "moderate" } ], "title": "CVE-2024-20926" }, { "cve": "CVE-2024-20932", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20932" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20932", "url": "https://www.suse.com/security/cve/CVE-2024-20932" }, { "category": "external", "summary": "SUSE Bug 1218908 for CVE-2024-20932", "url": "https://bugzilla.suse.com/1218908" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20932", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "important" } ], "title": "CVE-2024-20932" }, { "cve": "CVE-2024-20945", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20945" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20945", "url": "https://www.suse.com/security/cve/CVE-2024-20945" }, { "category": "external", "summary": "SUSE Bug 1218909 for CVE-2024-20945", "url": "https://bugzilla.suse.com/1218909" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20945", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "moderate" } ], "title": "CVE-2024-20945" }, { "cve": "CVE-2024-20952", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20952" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20952", "url": "https://www.suse.com/security/cve/CVE-2024-20952" }, { "category": "external", "summary": "SUSE Bug 1218911 for CVE-2024-20952", "url": "https://bugzilla.suse.com/1218911" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20952", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.ppc64le", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.s390x", "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-23T15:31:04Z", "details": "important" } ], "title": "CVE-2024-20952" } ] }
suse-su-2024:0619-1
Vulnerability from csaf_suse
Published
2024-02-26 11:20
Modified
2024-02-26 11:20
Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
Security fixes:
- CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).
- CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).
- CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).
- CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).
- CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).
- CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).
- CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).
- CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).
Patchnames
SUSE-2024-619,SUSE-SLE-Module-Legacy-15-SP5-2024-619,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-619,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-619,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-619,SUSE-Storage-7.1-2024-619,openSUSE-SLE-15.5-2024-619
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for java-1_8_0-ibm", "title": "Title of the patch" }, { "category": "description", "text": "This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]\n\nSecurity fixes:\n\n- CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).\n- CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).\n- CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).\n- CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).\n- CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).\n- CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).\n- CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).\n- CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-619,SUSE-SLE-Module-Legacy-15-SP5-2024-619,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-619,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-619,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-619,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-619,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-619,SUSE-Storage-7.1-2024-619,openSUSE-SLE-15.5-2024-619", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0619-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:0619-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240619-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:0619-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/018007.html" }, { "category": "self", "summary": "SUSE Bug 1218903", "url": "https://bugzilla.suse.com/1218903" }, { "category": "self", "summary": "SUSE Bug 1218905", "url": "https://bugzilla.suse.com/1218905" }, { "category": "self", "summary": "SUSE Bug 1218906", "url": "https://bugzilla.suse.com/1218906" }, { "category": "self", "summary": "SUSE Bug 1218907", "url": "https://bugzilla.suse.com/1218907" }, { "category": "self", "summary": "SUSE Bug 1218908", "url": "https://bugzilla.suse.com/1218908" }, { "category": "self", "summary": "SUSE Bug 1218909", "url": "https://bugzilla.suse.com/1218909" }, { "category": "self", "summary": "SUSE Bug 1218911", "url": "https://bugzilla.suse.com/1218911" }, { "category": "self", "summary": "SUSE Bug 1219843", "url": "https://bugzilla.suse.com/1219843" }, { "category": "self", "summary": "SUSE CVE CVE-2023-33850 page", "url": "https://www.suse.com/security/cve/CVE-2023-33850/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20918 page", "url": "https://www.suse.com/security/cve/CVE-2024-20918/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20919 page", "url": "https://www.suse.com/security/cve/CVE-2024-20919/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20921 page", "url": "https://www.suse.com/security/cve/CVE-2024-20921/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20926 page", "url": "https://www.suse.com/security/cve/CVE-2024-20926/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20932 page", "url": "https://www.suse.com/security/cve/CVE-2024-20932/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20945 page", "url": "https://www.suse.com/security/cve/CVE-2024-20945/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-20952 page", "url": "https://www.suse.com/security/cve/CVE-2024-20952/" } ], "title": "Security update for java-1_8_0-ibm", "tracking": { "current_release_date": "2024-02-26T11:20:16Z", "generator": { "date": "2024-02-26T11:20:16Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:0619-1", "initial_release_date": "2024-02-26T11:20:16Z", "revision_history": [ { "date": "2024-02-26T11:20:16Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.i586" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.i586", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.i586", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" } }, { "category": "product_version", "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64", "product": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64", "product_id": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Legacy 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-legacy:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp4" } } }, { "category": "product_name", "name": "SUSE Enterprise Storage 7.1", "product": { "name": "SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1", "product_identification_helper": { "cpe": "cpe:/o:suse:ses:7.1" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP5", "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le" }, "product_reference": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x" }, "product_reference": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" }, "product_reference": "java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-33850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-33850" } ], "notes": [ { "category": "general", "text": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-33850", "url": "https://www.suse.com/security/cve/CVE-2023-33850" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2023-33850", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "important" } ], "title": "CVE-2023-33850" }, { "cve": "CVE-2024-20918", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20918" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20918", "url": "https://www.suse.com/security/cve/CVE-2024-20918" }, { "category": "external", "summary": "SUSE Bug 1218907 for CVE-2024-20918", "url": "https://bugzilla.suse.com/1218907" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20918", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "important" } ], "title": "CVE-2024-20918" }, { "cve": "CVE-2024-20919", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20919" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20919", "url": "https://www.suse.com/security/cve/CVE-2024-20919" }, { "category": "external", "summary": "SUSE Bug 1218903 for CVE-2024-20919", "url": "https://bugzilla.suse.com/1218903" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20919", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "moderate" } ], "title": "CVE-2024-20919" }, { "cve": "CVE-2024-20921", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20921" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20921", "url": "https://www.suse.com/security/cve/CVE-2024-20921" }, { "category": "external", "summary": "SUSE Bug 1218905 for CVE-2024-20921", "url": "https://bugzilla.suse.com/1218905" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20921", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "moderate" } ], "title": "CVE-2024-20921" }, { "cve": "CVE-2024-20926", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20926" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20926", "url": "https://www.suse.com/security/cve/CVE-2024-20926" }, { "category": "external", "summary": "SUSE Bug 1218906 for CVE-2024-20926", "url": "https://bugzilla.suse.com/1218906" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20926", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "moderate" } ], "title": "CVE-2024-20926" }, { "cve": "CVE-2024-20932", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20932" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20932", "url": "https://www.suse.com/security/cve/CVE-2024-20932" }, { "category": "external", "summary": "SUSE Bug 1218908 for CVE-2024-20932", "url": "https://bugzilla.suse.com/1218908" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20932", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "important" } ], "title": "CVE-2024-20932" }, { "cve": "CVE-2024-20945", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20945" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20945", "url": "https://www.suse.com/security/cve/CVE-2024-20945" }, { "category": "external", "summary": "SUSE Bug 1218909 for CVE-2024-20945", "url": "https://bugzilla.suse.com/1218909" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20945", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "moderate" } ], "title": "CVE-2024-20945" }, { "cve": "CVE-2024-20952", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-20952" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-20952", "url": "https://www.suse.com/security/cve/CVE-2024-20952" }, { "category": "external", "summary": "SUSE Bug 1218911 for CVE-2024-20952", "url": "https://bugzilla.suse.com/1218911" }, { "category": "external", "summary": "SUSE Bug 1219843 for CVE-2024-20952", "url": "https://bugzilla.suse.com/1219843" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Enterprise Storage 7.1:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Module for Legacy 15 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1.x86_64", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.ppc64le", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.s390x", "openSUSE Leap 15.5:java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-26T11:20:16Z", "details": "important" } ], "title": "CVE-2024-20952" } ] }
ghsa-xxxm-cq2q-5v69
Vulnerability from github
Published
2023-08-22 21:30
Modified
2024-04-04 07:09
Severity ?
VLAI Severity ?
Details
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.
{ "affected": [], "aliases": [ "CVE-2023-33850" ], "database_specific": { "cwe_ids": [ "CWE-203" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-08-22T21:15:07Z", "severity": "HIGH" }, "details": "\nIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.\n\n", "id": "GHSA-xxxm-cq2q-5v69", "modified": "2024-04-04T07:09:20Z", "published": "2023-08-22T21:30:28Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33850" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132" }, { "type": "WEB", "url": "https://www.ibm.com/support/pages/node/7010369" }, { "type": "WEB", "url": "https://www.ibm.com/support/pages/node/7022413" }, { "type": "WEB", "url": "https://www.ibm.com/support/pages/node/7022414" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" } ] }
wid-sec-w-2024-0769
Vulnerability from csaf_certbund
Published
2024-04-02 22:00
Modified
2024-11-07 23:00
Summary
IBM Rational Build Forge: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Rational Build Forge ist ein Framework zur Automatisierung und Standardisierung des Softwareerstellungsprozesses
Angriff
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Rational Build Forge ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM Rational Build Forge ist ein Framework zur Automatisierung und Standardisierung des Softwareerstellungsprozesses", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Rational Build Forge ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0769 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0769.json" }, { "category": "self", "summary": "WID-SEC-2024-0769 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0769" }, { "category": "external", "summary": "IBM Security Bulletin vom 2024-04-02", "url": "https://www.ibm.com/support/pages/node/7145704" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:3949-1 vom 2024-11-08", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019796.html" } ], "source_lang": "en-US", "title": "IBM Rational Build Forge: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-11-07T23:00:00.000+00:00", "generator": { "date": "2024-11-08T11:11:40.811+00:00", "engine": { "name": "BSI-WID", "version": "1.3.8" } }, "id": "WID-SEC-W-2024-0769", "initial_release_date": "2024-04-02T22:00:00.000+00:00", "revision_history": [ { "date": "2024-04-02T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-11-07T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von SUSE aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c8.0.0.26", "product": { "name": "IBM Rational Build Forge \u003c8.0.0.26", "product_id": "T033838" } }, { "category": "product_version", "name": "8.0.0.26", "product": { "name": "IBM Rational Build Forge 8.0.0.26", "product_id": "T033838-fixed", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_build_forge:8.0.0.26" } } } ], "category": "product_name", "name": "Rational Build Forge" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22067", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-22067" }, { "cve": "CVE-2023-22081", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-22081" }, { "cve": "CVE-2023-31122", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-31122" }, { "cve": "CVE-2023-33850", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-33850" }, { "cve": "CVE-2023-43622", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-43622" }, { "cve": "CVE-2023-45802", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-45802" }, { "cve": "CVE-2023-46589", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-46589" }, { "cve": "CVE-2023-5676", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-5676" }, { "cve": "CVE-2023-5678", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-5678" }, { "cve": "CVE-2023-6129", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-6129" }, { "cve": "CVE-2023-6237", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-6237" }, { "cve": "CVE-2023-6710", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2023-6710" }, { "cve": "CVE-2024-0727", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-0727" }, { "cve": "CVE-2024-20918", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20918" }, { "cve": "CVE-2024-20919", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20919" }, { "cve": "CVE-2024-20921", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20921" }, { "cve": "CVE-2024-20926", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20926" }, { "cve": "CVE-2024-20945", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20945" }, { "cve": "CVE-2024-20952", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-20952" }, { "cve": "CVE-2024-21733", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-21733" }, { "cve": "CVE-2024-23672", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-23672" }, { "cve": "CVE-2024-24549", "notes": [ { "category": "description", "text": "In IBM Rational Build Forge existieren mehrere Schwachstellen. Diese bestehen in verschiedenen Komponenten von Drittanbietern, u.a. Oracle Java SE, Apache HTTP Server, OpenSSL und Apache Tomcat. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur Ausnutzung einiger dieser Schwachstellen ist eine Nutzeraktion oder bestimmte Berechtigungen erforderlich." } ], "product_status": { "known_affected": [ "T002207", "T033838" ] }, "release_date": "2024-04-02T22:00:00.000+00:00", "title": "CVE-2024-24549" } ] }
wid-sec-w-2025-0518
Vulnerability from csaf_certbund
Published
2025-03-10 23:00
Modified
2025-03-10 23:00
Summary
IBM InfoSphere Data Replication: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM InfoSphere Data Replication bietet protokollbasierte Änderungsdatenerfassung mit Transaktionsintegrität zur Unterstützung von Big-Data-Integration und Konsolidierung sowie für maßgeschneiderte Warehousing- und Analyseinitiativen.
Angriff
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Data Replication ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.
Betroffene Betriebssysteme
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM InfoSphere Data Replication bietet protokollbasierte \u00c4nderungsdatenerfassung mit Transaktionsintegrit\u00e4t zur Unterst\u00fctzung von Big-Data-Integration und Konsolidierung sowie f\u00fcr ma\u00dfgeschneiderte Warehousing- und Analyseinitiativen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Data Replication ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2025-0518 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0518.json" }, { "category": "self", "summary": "WID-SEC-2025-0518 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0518" }, { "category": "external", "summary": "IBM Security Bulletin vom 2025-03-10", "url": "https://www.ibm.com/support/pages/node/7185312" }, { "category": "external", "summary": "IBM Security Bulletin vom 2025-03-10", "url": "https://www.ibm.com/support/pages/node/7185316" } ], "source_lang": "en-US", "title": "IBM InfoSphere Data Replication: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-03-10T23:00:00.000+00:00", "generator": { "date": "2025-03-11T11:10:16.976+00:00", "engine": { "name": "BSI-WID", "version": "1.3.12" } }, "id": "WID-SEC-W-2025-0518", "initial_release_date": "2025-03-10T23:00:00.000+00:00", "revision_history": [ { "date": "2025-03-10T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c11.4.0.5.5702", "product": { "name": "IBM InfoSphere Data Replication \u003c11.4.0.5.5702", "product_id": "T041718" } }, { "category": "product_version", "name": "11.4.0.5.5702", "product": { "name": "IBM InfoSphere Data Replication 11.4.0.5.5702", "product_id": "T041718-fixed", "product_identification_helper": { "cpe": "cpe:/a:ibm:infosphere_data_replication:11.4.0.5.5702" } } }, { "category": "product_version_range", "name": "\u003c11.4.0.5.5752", "product": { "name": "IBM InfoSphere Data Replication \u003c11.4.0.5.5752", "product_id": "T041719" } }, { "category": "product_version", "name": "11.4.0.5.5752", "product": { "name": "IBM InfoSphere Data Replication 11.4.0.5.5752", "product_id": "T041719-fixed", "product_identification_helper": { "cpe": "cpe:/a:ibm:infosphere_data_replication:11.4.0.5.5752" } } } ], "category": "product_name", "name": "InfoSphere Data Replication" } ], "category": "vendor", "name": "IBM" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-33850", "product_status": { "known_affected": [ "T041719", "T041718" ] }, "release_date": "2025-03-10T23:00:00.000+00:00", "title": "CVE-2023-33850" }, { "cve": "CVE-2023-43642", "product_status": { "known_affected": [ "T041718" ] }, "release_date": "2025-03-10T23:00:00.000+00:00", "title": "CVE-2023-43642" } ] }
wid-sec-w-2024-0627
Vulnerability from csaf_certbund
Published
2024-03-13 23:00
Modified
2024-03-13 23:00
Summary
IBM Rational Application Developer for WebSphere Software: Schwachstelle ermöglicht Offenlegung von Informationen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Rational Application Developer ist eine integrierte Entwicklungsumgebung der Firma IBM für die Entwicklung und Analyse von Web-, Webservices-, Java-, J2EE- und Portalanwendungen.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Rational Application Developer for WebSphere Software ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme
- Linux
- MacOS X
- Windows
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM Rational Application Developer ist eine integrierte Entwicklungsumgebung der Firma IBM f\u00fcr die Entwicklung und Analyse von Web-, Webservices-, Java-, J2EE- und Portalanwendungen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Rational Application Developer for WebSphere Software ausnutzen, um Informationen offenzulegen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- MacOS X\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0627 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0627.json" }, { "category": "self", "summary": "WID-SEC-2024-0627 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0627" }, { "category": "external", "summary": "IBM Security Bulletin vom 2024-03-13", "url": "https://www.ibm.com/support/pages/node/7140984" } ], "source_lang": "en-US", "title": "IBM Rational Application Developer for WebSphere Software: Schwachstelle erm\u00f6glicht Offenlegung von Informationen", "tracking": { "current_release_date": "2024-03-13T23:00:00.000+00:00", "generator": { "date": "2024-08-15T18:06:26.695+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2024-0627", "initial_release_date": "2024-03-13T23:00:00.000+00:00", "revision_history": [ { "date": "2024-03-13T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "9.6", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.6", "product_id": "T033488", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.6" } } }, { "category": "product_version", "name": "9.7", "product": { "name": "IBM Rational Application Developer for WebSphere Software 9.7", "product_id": "T033489", "product_identification_helper": { "cpe": "cpe:/a:ibm:rational_application_developer_for_websphere_software:9.7" } } } ], "category": "product_name", "name": "Rational Application Developer for WebSphere Software" } ], "category": "vendor", "name": "IBM" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-33850", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in IBM Rational Application Developer for WebSphere Software. Dieser Fehler besteht in der Komponente GSKit-Crypto aufgrund eines zeitbasierten Seitenkanals in der RSA-Entschl\u00fcsselungsimplementierung. Durch das Senden einer \u00fcberm\u00e4\u00dfig gro\u00dfen Anzahl von Testmeldungen zur Entschl\u00fcsselung kann ein entfernter, anonymer Angreifer diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen." } ], "product_status": { "known_affected": [ "T033488", "T033489" ] }, "release_date": "2024-03-13T23:00:00.000+00:00", "title": "CVE-2023-33850" } ] }
wid-sec-w-2023-2550
Vulnerability from csaf_certbund
Published
2023-10-03 22:00
Modified
2024-04-29 22:00
Summary
IBM Rational ClearQuest: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Rational ClearQuest stellt eine Lösung zur Fehler- und Änderungsverfolgung zur Verfügung.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Rational ClearQuest ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM Rational ClearQuest stellt eine L\u00f6sung zur Fehler- und \u00c4nderungsverfolgung zur Verf\u00fcgung.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Rational ClearQuest ausnutzen, um Informationen offenzulegen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2550 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2550.json" }, { "category": "self", "summary": "WID-SEC-2023-2550 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2550" }, { "category": "external", "summary": "IBM Security Bulletin 7130904 vom 2024-03-08", "url": "https://www.ibm.com/support/pages/node/7130904" }, { "category": "external", "summary": "IBM Security Bulletin vom 2023-10-03", "url": "https://www.ibm.com/support/pages/node/7041679" }, { "category": "external", "summary": "IBM Security Bulletin 7149801 vom 2024-04-30", "url": "https://www.ibm.com/support/pages/node/7149801" } ], "source_lang": "en-US", "title": "IBM Rational ClearQuest: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-04-29T22:00:00.000+00:00", "generator": { "date": "2024-08-15T17:59:23.892+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-2550", "initial_release_date": "2023-10-03T22:00:00.000+00:00", "revision_history": [ { "date": "2023-10-03T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-03-07T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-04-29T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von IBM aufgenommen" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "7.3", "product": { "name": "IBM AIX 7.3", "product_id": "1139691", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.3" } } }, { "category": "product_version", "name": "7.2", "product": { "name": "IBM AIX 7.2", "product_id": "434967", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.2" } } } ], "category": "product_name", "name": "AIX" }, { "category": "product_name", "name": "IBM MQ", "product": { "name": "IBM MQ", "product_id": "T021398", "product_identification_helper": { "cpe": "cpe:/a:ibm:mq:-" } } }, { "branches": [ { "category": "product_version_range", "name": "\u003c10.0.3", "product": { "name": "IBM Rational ClearQuest \u003c10.0.3", "product_id": "T030177" } }, { "category": "product_version_range", "name": "\u003c9.0.2.8", "product": { "name": "IBM Rational ClearQuest \u003c9.0.2.8", "product_id": "T030204" } }, { "category": "product_version_range", "name": "\u003c9.1.0.5", "product": { "name": "IBM Rational ClearQuest \u003c9.1.0.5", "product_id": "T030211" } } ], "category": "product_name", "name": "Rational ClearQuest" }, { "branches": [ { "category": "product_version", "name": "3.1", "product": { "name": "IBM VIOS 3.1", "product_id": "1039165", "product_identification_helper": { "cpe": "cpe:/a:ibm:vios:3.1" } } }, { "category": "product_version", "name": "4.1", "product": { "name": "IBM VIOS 4.1", "product_id": "1522854", "product_identification_helper": { "cpe": "cpe:/a:ibm:vios:4.1" } } } ], "category": "product_name", "name": "VIOS" } ], "category": "vendor", "name": "IBM" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-32342", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in IBM Rational ClearQuest. Diese werden durch einen zeitbasierten Seitenkanal in der RSA-Entschl\u00fcsselungsimplementierung im IBM GSKit-Crypto verursacht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen durch das Senden einer \u00fcberm\u00e4\u00dfig gro\u00dfen Anzahl von Versuchsnachrichten ausnutzen, um Informationen offenzulegen." } ], "product_status": { "known_affected": [ "1139691", "434967", "1039165", "1522854", "T021398" ] }, "release_date": "2023-10-03T22:00:00.000+00:00", "title": "CVE-2023-32342" }, { "cve": "CVE-2023-33850", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in IBM Rational ClearQuest. Diese werden durch einen zeitbasierten Seitenkanal in der RSA-Entschl\u00fcsselungsimplementierung im IBM GSKit-Crypto verursacht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen durch das Senden einer \u00fcberm\u00e4\u00dfig gro\u00dfen Anzahl von Versuchsnachrichten ausnutzen, um Informationen offenzulegen." } ], "product_status": { "known_affected": [ "1139691", "434967", "1039165", "1522854", "T021398" ] }, "release_date": "2023-10-03T22:00:00.000+00:00", "title": "CVE-2023-33850" } ] }
fkie_cve-2023-33850
Vulnerability from fkie_nvd
Published
2023-08-22 21:15
Modified
2024-11-21 08:06
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
References
▶ | URL | Tags | |
---|---|---|---|
psirt@us.ibm.com | https://www.ibm.com/support/pages/node/7010369 | Vendor Advisory | |
psirt@us.ibm.com | https://www.ibm.com/support/pages/node/7022413 | Vendor Advisory | |
psirt@us.ibm.com | https://www.ibm.com/support/pages/node/7022414 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/257132 | ||
af854a3a-2127-422b-91ae-364da2661108 | https://www.ibm.com/support/pages/node/7010369 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ibm.com/support/pages/node/7022413 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ibm.com/support/pages/node/7022414 | Vendor Advisory |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
ibm | txseries_for_multiplatform | 8.1 | |
ibm | txseries_for_multiplatform | 9.1 | |
ibm | aix | - | |
linux | linux_kernel | - | |
ibm | txseries_for_multiplatform | 8.2 | |
hp | hp-ux | - | |
ibm | aix | - | |
linux | linux_kernel | - | |
microsoft | windows | - | |
ibm | cics_tx | 11.1 | |
linux | linux_kernel | - | |
ibm | cics_tx | 10.1 | |
ibm | cics_tx | 11.1 | |
linux | linux_kernel | - |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "3D5EA02F-AA81-4101-9CE2-46ED4DE76B25", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "569BF866-989C-4BF4-B80E-962F8979FD8B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89", "vulnerable": false }, { "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "BB032B5B-3B05-4809-8BF2-E08255E19475", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*", "matchCriteriaId": "F480AA32-841A-4E68-9343-B2E7548B0A0C", "vulnerable": false }, { "criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89", "vulnerable": false }, { "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false }, { "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*", "matchCriteriaId": "66EEC046-128D-4555-8C9A-3C02300145B5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*", "matchCriteriaId": "73BBDE39-E8CF-416C-838D-046ADDA011F8", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*", "matchCriteriaId": "A9D7FDA3-EE60-453B-8651-686B9D28071F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information." } ], "id": "CVE-2023-33850", "lastModified": "2024-11-21T08:06:04.500", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-08-22T21:15:07.837", "references": [ { "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7010369" }, { "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022413" }, { "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022414" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7010369" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022413" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022414" } ], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-203" } ], "source": "psirt@us.ibm.com", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-203" } ], "source": "nvd@nist.gov", "type": "Secondary" } ] }
gsd-2023-33850
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2023-33850", "id": "GSD-2023-33850" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-33850" ], "details": "\nIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.\n\n", "id": "GSD-2023-33850", "modified": "2023-12-13T01:20:36.263504Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2023-33850", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "TXSeries for Multiplatforms", "version": { "version_data": [ { "version_affected": "=", "version_value": "8.1, 8.2, 9.1" } ] } }, { "product_name": "CICS TX Standard", "version": { "version_data": [ { "version_affected": "=", "version_value": "11.1" } ] } }, { "product_name": "CICS TX Advanced", "version": { "version_data": [ { "version_affected": "=", "version_value": "10.1, 11.1" } ] } } ] }, "vendor_name": "IBM" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "\nIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.\n\n" } ] }, "generator": { "engine": "Vulnogram 0.1.0-dev" }, "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "208 Information Exposure Through Timing Discrepancy" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.ibm.com/support/pages/node/7010369", "refsource": "MISC", "url": "https://www.ibm.com/support/pages/node/7010369" }, { "name": "https://www.ibm.com/support/pages/node/7022413", "refsource": "MISC", "url": "https://www.ibm.com/support/pages/node/7022413" }, { "name": "https://www.ibm.com/support/pages/node/7022414", "refsource": "MISC", "url": "https://www.ibm.com/support/pages/node/7022414" }, { "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132" } ] }, "source": { "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ibm:txseries_for_multiplatform:9.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:ibm:txseries_for_multiplatform:8.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2023-33850" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "\nIBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 257132.\n\n" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-203" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.ibm.com/support/pages/node/7022413", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022413" }, { "name": "https://www.ibm.com/support/pages/node/7022414", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7022414" }, { "name": "https://www.ibm.com/support/pages/node/7010369", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://www.ibm.com/support/pages/node/7010369" }, { "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132", "refsource": "MISC", "tags": [ "VDB Entry", "Vendor Advisory" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/257132" } ] } }, "impact": { "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2023-08-28T19:51Z", "publishedDate": "2023-08-22T21:15Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…