suse-su-2020:3359-1
Vulnerability from csaf_suse
Published
2020-11-17 12:19
Modified
2020-11-17 12:19
Summary
Security update for java-11-openjdk
Notes
Title of the patch
Security update for java-11-openjdk
Description of the patch
This update for java-11-openjdk fixes the following issues:
- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
bsc#1177943)
* New features
+ JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
* Security fixes
+ JDK-8233624: Enhance JNI linkage
+ JDK-8236196: Improve string pooling
+ JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
+ JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
+ JDK-8237995, CVE-2020-14782: Enhance certificate processing
+ JDK-8240124: Better VM Interning
+ JDK-8241114, CVE-2020-14792: Better range handling
+ JDK-8242680, CVE-2020-14796: Improved URI Support
+ JDK-8242685, CVE-2020-14797: Better Path Validation
+ JDK-8242695, CVE-2020-14798: Enhanced buffer support
+ JDK-8243302: Advanced class supports
+ JDK-8244136, CVE-2020-14803: Improved Buffer supports
+ JDK-8244479: Further constrain certificates
+ JDK-8244955: Additional Fix for JDK-8240124
+ JDK-8245407: Enhance zoning of times
+ JDK-8245412: Better class definitions
+ JDK-8245417: Improve certificate chain handling
+ JDK-8248574: Improve jpeg processing
+ JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
+ JDK-8253019: Enhanced JPEG decoding
* Other changes
+ JDK-6532025: GIF reader throws misleading exception with
truncated images
+ JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
/PDialogTest.java needs update by removing an infinite loop
+ JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
/Test8017492.java fails
+ JDK-8062947: Fix exception message to correctly represent
LDAP connection failure
+ JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
+ JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
/CloseServerSocket.java fails intermittently with Address
already in use
+ JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
due to timeout on DeadServerNoTimeoutTest is incorrect
+ JDK-8160768: Add capability to custom resolve host/domain
names within the default JNDI LDAP provider
+ JDK-8172404: Tools should warn if weak algorithms are used
before restricting them
+ JDK-8193367: Annotated type variable bounds crash javac
+ JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
fails intermittently: Connection reset
+ JDK-8203026: java.rmi.NoSuchObjectException: no such object
in table
+ JDK-8203281: [Windows] JComboBox change in ui when
editor.setBorder() is called
+ JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
resolve_wk_klass
+ JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
JdbExprTest.sh fail due to timeout
+ JDK-8203928: [Test] Convert non-JDB scaffolding
serviceability shell script tests to java
+ JDK-8204963: javax.swing.border.TitledBorder has a memory leak
+ JDK-8204994: SA might fail to attach to process with 'Windbg
Error: WaitForEvent failed'
+ JDK-8205534: Remove SymbolTable dependency from
serviceability agent
+ JDK-8206309: Tier1 SA tests fail
+ JDK-8208281: java/nio/channels/
/AsynchronousSocketChannel/Basic.java timed out
+ JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
version - step1
+ JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
is incorrect
+ JDK-8209342: Problemlist SA tests on Solaris due to Error
attaching to process: Can't create thread_db agent!
+ JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
should be marked as headful
+ JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
timeout
+ JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
version - step2
+ JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
ZGC
+ JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
+ JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
/ap10t001/TestDescription.java failed with ObjectFree:
GetCurrentThreadCpuTimerInfo returned unexpected error code
+ JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
version - step3
+ JDK-8210527: JShell: NullPointerException in
jdk.jshell.Eval.translateExceptionStack
+ JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
tests
+ JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
with waitForPrompt timed out after 60 seconds
+ JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
clarify which output is the pending reply after a timeout
+ JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
version - step4
+ JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
fails to find ThreadLocalObject
+ JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
test
+ JDK-8211694: JShell: Redeclared variable should be reset
+ JDK-8212200: assert when shared java.lang.Object is redefined
by JVMTI agent
+ JDK-8212629: [TEST] wrong breakpoint in
test/jdk/com/sun/jdi/DeferredStepTest
+ JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
- unexpected. lastLine=52, minLine=52, maxLine=55
+ JDK-8212807: tools/jar/multiRelease/Basic.java times out
+ JDK-8213182: Minimal VM build failure after JDK-8212200
(assert when shared java.lang.Object is redefined by JVMTI
agent)
+ JDK-8213214: Set -Djava.io.tmpdir= when running tests
+ JDK-8213275: ReplaceCriticalClasses.java fails with
jdk.internal.vm.PostVMInitHook not found
+ JDK-8213574: Deadlock in string table expansion when dumping
lots of CDS classes
+ JDK-8213703: LambdaConversionException: Invalid receiver type
not a subtype of implementation type interface
+ JDK-8214074: Ghash optimization using AVX instructions
+ JDK-8214491: Upgrade to JLine 3.9.0
+ JDK-8214797: TestJmapCoreMetaspace.java timed out
+ JDK-8215243: JShell tests failing intermitently with
'Problem cleaning up the following threads:'
+ JDK-8215244: jdk/jshell/ToolBasicTest.java
testHistoryReference failed
+ JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
optimization using AVX instructions)
+ JDK-8215438: jshell tool: Ctrl-D causes EOF
+ JDK-8216021: RunTest.gmk might set concurrency level to 1 on
Windows
+ JDK-8216974: HttpConnection not returned to the pool after
204 response
+ JDK-8218948: SimpleDateFormat :: format - Zone Names are not
reflected correctly during run time
+ JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
too small on new Skylake CPUs
+ JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
instead of aliased B&W glyphs
+ JDK-8221658: aarch64: add necessary predicate for ubfx
patterns
+ JDK-8221759: Crash when completing 'java.io.File.path'
+ JDK-8221918: runtime/SharedArchiveFile/serviceability/
/ReplaceCriticalClasses.java fails: Shared archive not found
+ JDK-8222074: Enhance auto vectorization for x86
+ JDK-8222079: Don't use memset to initialize fields decode_env
constructor in disassembler.cpp
+ JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
on hostname command
+ JDK-8223688: JShell: crash on the instantiation of raw
anonymous class
+ JDK-8223777: In posix_spawn mode, failing to exec()
jspawnhelper does not result in an error
+ JDK-8223940: Private key not supported by chosen signature
algorithm
+ JDK-8224184: jshell got IOException at exiting with AIX
+ JDK-8224234: compiler/codegen/TestCharVect2.java fails in
test_mulc
+ JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
NullPointerException
+ JDK-8225625: AES Electronic Codebook (ECB) encryption and
decryption optimization using AVX512 + VAES instructions
+ JDK-8226536: Catch OOM from deopt that fails rematerializing
objects
+ JDK-8226575: OperatingSystemMXBean should be made container
aware
+ JDK-8226697: Several tests which need the @key headful
keyword are missing it.
+ JDK-8226809: Circular reference in printed stack trace is not
correctly indented & ambiguous
+ JDK-8227059: sun/security/tools/keytool/
/DefaultSignatureAlgorithm.java timed out
+ JDK-8227269: Slow class loading when running with JDWP
+ JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
fails due to 'exitValue = 6'
+ JDK-8228448: Jconsole can't connect to itself
+ JDK-8228967: Trust/Key store and SSL context utilities for
tests
+ JDK-8229378: jdwp library loader in linker_md.c quietly
truncates on buffer overflow
+ JDK-8229815: Upgrade Jline to 3.12.1
+ JDK-8230000: some httpclients testng tests run zero test
+ JDK-8230002: javax/xml/jaxp/unittest/transform/
/SecureProcessingTest.java runs zero test
+ JDK-8230010: Remove jdk8037819/BasicTest1.java
+ JDK-8230094: CCE in createXMLEventWriter(Result) over an
arbitrary XMLStreamWriter
+ JDK-8230402: Allocation of compile task fails with assert:
'Leaking compilation tasks?'
+ JDK-8230767: FlightRecorderListener returns null recording
+ JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
test/jdk/java/util/zip/EntryCount64k.java
+ JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
can be quicker for self thread
+ JDK-8231586: enlarge encoding space for OopMapValue offsets
+ JDK-8231953: Wrong assumption in assertion in
oop::register_oop
+ JDK-8231968: getCurrentThreadAllocatedBytes default
implementation s/b getThreadAllocatedBytes
+ JDK-8232083: Minimal VM is broken after JDK-8231586
+ JDK-8232161: Align some one-way conversion in MS950 charset
with Windows
+ JDK-8232855: jshell missing word in /help help
+ JDK-8233027: OopMapSet::all_do does oms.next() twice during
iteration
+ JDK-8233228: Disable weak named curves by default in TLS,
CertPath, and Signed JAR
+ JDK-8233386: Initialize NULL fields for unused decorations
+ JDK-8233452: java.math.BigDecimal.sqrt() with
RoundingMode.FLOOR results in incorrect result
+ JDK-8233686: XML transformer uses excessive amount of memory
+ JDK-8233741: AES Countermode (AES-CTR) optimization using
AVX512 + VAES instructions
+ JDK-8233829: javac cannot find non-ASCII module name under
non-UTF8 environment
+ JDK-8233958: Memory retention due to HttpsURLConnection
finalizer that serves no purpose
+ JDK-8234011: (zipfs) Memory leak in
ZipFileSystem.releaseDeflater()
+ JDK-8234058: runtime/CompressedOops/
/CompressedClassPointers.java fails with 'Narrow klass base:
0x0000000000000000' missing from stdout/stderr
+ JDK-8234149: Several regression tests do not dispose Frame at
end
+ JDK-8234347: 'Turkey' meta time zone does not generate
composed localized names
+ JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
/bug6980209.java fails in linux nightly
+ JDK-8234535: Cross compilation fails due to missing CFLAGS
for the BUILD_CC
+ JDK-8234541: C1 emits an empty message when it inlines
successfully
+ JDK-8234687: change javap reporting on unknown attributes
+ JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
11
+ JDK-8236548: Localized time zone name inconsistency between
English and other locales
+ JDK-8236617: jtreg test containers/docker/
/TestMemoryAwareness.java fails after 8226575
+ JDK-8237182: Update copyright header for shenandoah and
epsilon files
+ JDK-8237888: security/infra/java/security/cert/
/CertPathValidator/certification/LuxTrustCA.java fails when
checking validity interval
+ JDK-8237977: Further update
javax/net/ssl/compatibility/Compatibility.java
+ JDK-8238270: java.net HTTP/2 client does not decrease stream
count when receives 204 response
+ JDK-8238284: [macos] Zero VM build fails due to an obvious
typo
+ JDK-8238380: java.base/unix/native/libjava/childproc.c
'multiple definition' link errors with GCC10
+ JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
'multiple definition' link errors with GCC10
+ JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link
errors with GCC10
+ JDK-8238448: RSASSA-PSS signature verification fail when
using certain odd key sizes
+ JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
with non-zero code
+ JDK-8239083: C1 assert(known_holder == NULL ||
(known_holder->is_instance_klass() &&
(!known_holder->is_interface() ||
((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())),
'should be non-static concrete method');
+ JDK-8239385: KerberosTicket client name refers wrongly to
sAMAccountName in AD
+ JDK-8240169: javadoc fails to link to non-modular api docs
+ JDK-8240295: hs_err elapsed time in seconds is not accurate
enough
+ JDK-8240360: NativeLibraryEvent has wrong library name on
Linux
+ JDK-8240676: Meet not symmetric failure when running lucene
on jdk8
+ JDK-8241007: Shenandoah: remove
ShenandoahCriticalControlThreadPriority support
+ JDK-8241065: Shenandoah: remove leftover code after
JDK-8231086
+ JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
failing on 32bit Windows
+ JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
java.lang.NullPointerException
+ JDK-8241138: http.nonProxyHosts=* causes
StringIndexOutOfBoundsException in DefaultProxySelector
+ JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
+ JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
fails with OOME
+ JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
+ JDK-8241750: x86_32 build failure after JDK-8227269
+ JDK-8242184: CRL generation error with RSASSA-PSS
+ JDK-8242283: Can't start JVM when java home path includes
non-ASCII character
+ JDK-8242556: Cannot load RSASSA-PSS public key with non-null
params from byte array
+ JDK-8243029: Rewrite javax/net/ssl/compatibility/
/Compatibility.java with a flexible interop test framework
+ JDK-8243138: Enhance BaseLdapServer to support starttls
extended request
+ JDK-8243320: Add SSL root certificates to Oracle Root CA
program
+ JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
program
+ JDK-8243389: enhance os::pd_print_cpu_info on linux
+ JDK-8243453: java --describe-module failed with non-ASCII
module name under non-UTF8 environment
+ JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
+ JDK-8243489: Thread CPU Load event may contain wrong data for
CPU time under certain conditions
+ JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
HiDPI screens (Windows)
+ JDK-8244087: 2020-04-24 public suffix list update
+ JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
release 1.8.26
+ JDK-8244164: AArch64: jaotc generates incorrect code for
compressed OOPs with non-zero heap base
+ JDK-8244196: adjust output in os_linux
+ JDK-8244225: stringop-overflow warning on strncpy call from
compile_the_world_in
+ JDK-8244287: JFR: Methods samples have line number 0
+ JDK-8244703: 'platform encoding not initialized' exceptions
with debugger, JNI
+ JDK-8244719: CTW: C2 compilation fails with
'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
remove node from hash table before modifying it'
+ JDK-8244729: Shenandoah: remove resolve paths from
SBSA::generate_shenandoah_lrb
+ JDK-8244763: Update --release 8 symbol information after JSR
337 MR3
+ JDK-8244818: Java2D Queue Flusher crash while moving
application window to external monitor
+ JDK-8245151: jarsigner should not raise duplicate warnings on
verification
+ JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
+ JDK-8245714: 'Bad graph detected in build_loop_late' when
loads are pinned on loop limit check uncommon branch
+ JDK-8245801: StressRecompilation triggers assert 'redundunt
OSR recompilation detected. memory leak in CodeCache!'
+ JDK-8245832: JDK build make-static-libs should build all JDK
libraries
+ JDK-8245880: Shenandoah: check class unloading flag early in
concurrent code root scan
+ JDK-8245981: Upgrade to jQuery 3.5.1
+ JDK-8246027: Minimal fastdebug build broken after JDK-8245801
+ JDK-8246094: [macos] Sound Recording and playback is not
working
+ JDK-8246153: TestEliminateArrayCopy fails with
-XX:+StressReflectiveCode
+ JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
+ JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
fails with AssertionError
+ JDK-8246203: Segmentation fault in verification due to stack
overflow with -XX:+VerifyIterativeGVN
+ JDK-8246330: Add TLS Tests for Legacy ECDSA curves
+ JDK-8246453: TestClone crashes with 'all collected exceptions
must come from the same place'
+ JDK-8247246: Add explicit ResolvedJavaType.link and expose
presence of default methods
+ JDK-8247350: [aarch64] assert(false) failed: wrong size of
mach node
+ JDK-8247502: PhaseStringOpts crashes while optimising
effectively dead code
+ JDK-8247615: Initialize the bytes left for the heap sampler
+ JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
in SBC2Support::pin_and_expand
+ JDK-8247874: Replacement in VersionProps.java.template not
working when --with-vendor-bug-url contains '&'
+ JDK-8247979: aarch64: missing side effect of killing flags
for clearArray_reg_reg
+ JDK-8248214: Add paddings for TaskQueueSuper to reduce
false-sharing cache contention
+ JDK-8248219: aarch64: missing memory barrier in
fast_storefield and fast_accessfield
+ JDK-8248348: Regression caused by the update to BCEL 6.0
+ JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
jtreg 5.1
+ JDK-8248495: [macos] zerovm is broken due to libffi headers
location
+ JDK-8248851: CMS: Missing memory fences between free chunk
check and klass read
+ JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
Windows
+ JDK-8249159: Downport test rework for SSLSocketTemplate from
8224650
+ JDK-8249215: JFrame::setVisible crashed with
-Dfile.encoding=UTF-8 on Japanese Windows.
+ JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
not highlighted in GTKLookAndFeel
+ JDK-8249255: Build fails if source code in cygwin home dir
+ JDK-8249277: TestVerifyIterativeGVN.java is failing with
timeout in OpenJDK 11
+ JDK-8249278: Revert JDK-8226253 which breaks the spec of
AccessibleState.SHOWING for JList
+ JDK-8249560: Shenandoah: Fix racy GC request handling
+ JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
+ JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
account for corner cases
+ JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
requesting TGS Kerberos tickets
+ JDK-8250609: C2 crash in IfNode::fold_compares
+ JDK-8250627: Use -XX:+/-UseContainerSupport for
enabling/disabling Java container metrics
+ JDK-8250755: Better cleanup for
jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
+ JDK-8250787: Provider.put no longer registering aliases in
FIPS env
+ JDK-8250826: jhsdb does not work with coredump which comes
from Substrate VM
+ JDK-8250827: Shenandoah: needs to reset/finish StringTable's
dead count before/after parallel walk
+ JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
the bounds
+ JDK-8251117: Cannot check P11Key size in P11Cipher and
P11AEADCipher
+ JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
test failure
+ JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
I-U
+ JDK-8251469: Better cleanup for
test/jdk/javax/imageio/SetOutput.java
+ JDK-8251487: Shenandoah: missing detail timing tracking for
final mark cleaning phase
+ JDK-8252120: compiler/oracle/TestCompileCommand.java
misspells 'occured'
+ JDK-8252157: JDK-8231209 11u backport breaks jmm binary
compatibility
+ JDK-8252258: [11u] JDK-8242154 changes the default vendor
+ JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
downport of 8234011
+ JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
in JDK 11
+ JDK-8253283: [11u] Test build/translations/
/VerifyTranslations.java failing after JDK-8252258
+ JDK-8253813: Backout JDK-8244287 from 11u: it causes several
crashes
+ Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,
bool)' introduced in jdk 11.0.9
Patchnames
SUSE-2020-3359,SUSE-SLE-Module-Basesystem-15-SP1-2020-3359,SUSE-SLE-Module-Basesystem-15-SP2-2020-3359,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-3359,SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2020-3359
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-11-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-11-openjdk fixes the following issues:\n\n- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,\n bsc#1177943)\n * New features\n + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector\n * Security fixes\n + JDK-8233624: Enhance JNI linkage\n + JDK-8236196: Improve string pooling\n + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class\n + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts\n + JDK-8237995, CVE-2020-14782: Enhance certificate processing\n + JDK-8240124: Better VM Interning\n + JDK-8241114, CVE-2020-14792: Better range handling\n + JDK-8242680, CVE-2020-14796: Improved URI Support\n + JDK-8242685, CVE-2020-14797: Better Path Validation\n + JDK-8242695, CVE-2020-14798: Enhanced buffer support\n + JDK-8243302: Advanced class supports\n + JDK-8244136, CVE-2020-14803: Improved Buffer supports\n + JDK-8244479: Further constrain certificates\n + JDK-8244955: Additional Fix for JDK-8240124\n + JDK-8245407: Enhance zoning of times\n + JDK-8245412: Better class definitions\n + JDK-8245417: Improve certificate chain handling\n + JDK-8248574: Improve jpeg processing\n + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit\n + JDK-8253019: Enhanced JPEG decoding\n * Other changes\n + JDK-6532025: GIF reader throws misleading exception with\n truncated images\n + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/\n /PDialogTest.java needs update by removing an infinite loop\n + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/\n /Test8017492.java fails\n + JDK-8062947: Fix exception message to correctly represent\n LDAP connection failure\n + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed\n + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/\n /CloseServerSocket.java fails intermittently with Address\n already in use\n + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed\n due to timeout on DeadServerNoTimeoutTest is incorrect\n + JDK-8160768: Add capability to custom resolve host/domain\n names within the default JNDI LDAP provider\n + JDK-8172404: Tools should warn if weak algorithms are used\n before restricting them\n + JDK-8193367: Annotated type variable bounds crash javac\n + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java\n fails intermittently: Connection reset\n + JDK-8203026: java.rmi.NoSuchObjectException: no such object\n in table\n + JDK-8203281: [Windows] JComboBox change in ui when\n editor.setBorder() is called\n + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to\n resolve_wk_klass\n + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and\n JdbExprTest.sh fail due to timeout\n + JDK-8203928: [Test] Convert non-JDB scaffolding\n serviceability shell script tests to java\n + JDK-8204963: javax.swing.border.TitledBorder has a memory leak\n + JDK-8204994: SA might fail to attach to process with \u0027Windbg\n Error: WaitForEvent failed\u0027\n + JDK-8205534: Remove SymbolTable dependency from\n serviceability agent\n + JDK-8206309: Tier1 SA tests fail\n + JDK-8208281: java/nio/channels/\n /AsynchronousSocketChannel/Basic.java timed out\n + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java\n version - step1\n + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh\n is incorrect\n + JDK-8209342: Problemlist SA tests on Solaris due to Error\n attaching to process: Can\u0027t create thread_db agent!\n + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java\n should be marked as headful\n + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with\n timeout\n + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java\n version - step2\n + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with\n ZGC\n + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java\n + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/\n /ap10t001/TestDescription.java failed with ObjectFree:\n GetCurrentThreadCpuTimerInfo returned unexpected error code\n + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java\n version - step3\n + JDK-8210527: JShell: NullPointerException in\n jdk.jshell.Eval.translateExceptionStack\n + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related\n tests\n + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails\n with waitForPrompt timed out after 60 seconds\n + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should\n clarify which output is the pending reply after a timeout\n + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java\n version - step4\n + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java\n fails to find ThreadLocalObject\n + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh\n test\n + JDK-8211694: JShell: Redeclared variable should be reset\n + JDK-8212200: assert when shared java.lang.Object is redefined\n by JVMTI agent\n + JDK-8212629: [TEST] wrong breakpoint in\n test/jdk/com/sun/jdi/DeferredStepTest\n + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)\n - unexpected. lastLine=52, minLine=52, maxLine=55\n + JDK-8212807: tools/jar/multiRelease/Basic.java times out\n + JDK-8213182: Minimal VM build failure after JDK-8212200\n (assert when shared java.lang.Object is redefined by JVMTI\n agent)\n + JDK-8213214: Set -Djava.io.tmpdir= when running tests\n + JDK-8213275: ReplaceCriticalClasses.java fails with\n jdk.internal.vm.PostVMInitHook not found\n + JDK-8213574: Deadlock in string table expansion when dumping\n lots of CDS classes\n + JDK-8213703: LambdaConversionException: Invalid receiver type\n not a subtype of implementation type interface\n + JDK-8214074: Ghash optimization using AVX instructions\n + JDK-8214491: Upgrade to JLine 3.9.0\n + JDK-8214797: TestJmapCoreMetaspace.java timed out\n + JDK-8215243: JShell tests failing intermitently with\n \u0027Problem cleaning up the following threads:\u0027\n + JDK-8215244: jdk/jshell/ToolBasicTest.java\n testHistoryReference failed\n + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash\n optimization using AVX instructions)\n + JDK-8215438: jshell tool: Ctrl-D causes EOF\n + JDK-8216021: RunTest.gmk might set concurrency level to 1 on\n Windows\n + JDK-8216974: HttpConnection not returned to the pool after\n 204 response\n + JDK-8218948: SimpleDateFormat :: format - Zone Names are not\n reflected correctly during run time\n + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is\n too small on new Skylake CPUs\n + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs\n instead of aliased B\u0026W glyphs\n + JDK-8221658: aarch64: add necessary predicate for ubfx\n patterns\n + JDK-8221759: Crash when completing \u0027java.io.File.path\u0027\n + JDK-8221918: runtime/SharedArchiveFile/serviceability/\n /ReplaceCriticalClasses.java fails: Shared archive not found\n + JDK-8222074: Enhance auto vectorization for x86\n + JDK-8222079: Don\u0027t use memset to initialize fields decode_env\n constructor in disassembler.cpp\n + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely\n on hostname command\n + JDK-8223688: JShell: crash on the instantiation of raw\n anonymous class\n + JDK-8223777: In posix_spawn mode, failing to exec()\n jspawnhelper does not result in an error\n + JDK-8223940: Private key not supported by chosen signature\n algorithm\n + JDK-8224184: jshell got IOException at exiting with AIX\n + JDK-8224234: compiler/codegen/TestCharVect2.java fails in\n test_mulc\n + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws\n NullPointerException\n + JDK-8225625: AES Electronic Codebook (ECB) encryption and\n decryption optimization using AVX512 + VAES instructions\n + JDK-8226536: Catch OOM from deopt that fails rematerializing\n objects\n + JDK-8226575: OperatingSystemMXBean should be made container\n aware\n + JDK-8226697: Several tests which need the @key headful\n keyword are missing it.\n + JDK-8226809: Circular reference in printed stack trace is not\n correctly indented \u0026 ambiguous\n + JDK-8227059: sun/security/tools/keytool/\n /DefaultSignatureAlgorithm.java timed out\n + JDK-8227269: Slow class loading when running with JDWP\n + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java\n fails due to \u0027exitValue = 6\u0027\n + JDK-8228448: Jconsole can\u0027t connect to itself\n + JDK-8228967: Trust/Key store and SSL context utilities for\n tests\n + JDK-8229378: jdwp library loader in linker_md.c quietly\n truncates on buffer overflow\n + JDK-8229815: Upgrade Jline to 3.12.1\n + JDK-8230000: some httpclients testng tests run zero test\n + JDK-8230002: javax/xml/jaxp/unittest/transform/\n /SecureProcessingTest.java runs zero test\n + JDK-8230010: Remove jdk8037819/BasicTest1.java\n + JDK-8230094: CCE in createXMLEventWriter(Result) over an\n arbitrary XMLStreamWriter\n + JDK-8230402: Allocation of compile task fails with assert:\n \u0027Leaking compilation tasks?\u0027\n + JDK-8230767: FlightRecorderListener returns null recording\n + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to\n test/jdk/java/util/zip/EntryCount64k.java\n + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()\n can be quicker for self thread\n + JDK-8231586: enlarge encoding space for OopMapValue offsets\n + JDK-8231953: Wrong assumption in assertion in\n oop::register_oop\n + JDK-8231968: getCurrentThreadAllocatedBytes default\n implementation s/b getThreadAllocatedBytes\n + JDK-8232083: Minimal VM is broken after JDK-8231586\n + JDK-8232161: Align some one-way conversion in MS950 charset\n with Windows\n + JDK-8232855: jshell missing word in /help help\n + JDK-8233027: OopMapSet::all_do does oms.next() twice during\n iteration\n + JDK-8233228: Disable weak named curves by default in TLS,\n CertPath, and Signed JAR\n + JDK-8233386: Initialize NULL fields for unused decorations\n + JDK-8233452: java.math.BigDecimal.sqrt() with\n RoundingMode.FLOOR results in incorrect result\n + JDK-8233686: XML transformer uses excessive amount of memory\n + JDK-8233741: AES Countermode (AES-CTR) optimization using\n AVX512 + VAES instructions\n + JDK-8233829: javac cannot find non-ASCII module name under\n non-UTF8 environment\n + JDK-8233958: Memory retention due to HttpsURLConnection\n finalizer that serves no purpose\n + JDK-8234011: (zipfs) Memory leak in\n ZipFileSystem.releaseDeflater()\n + JDK-8234058: runtime/CompressedOops/\n /CompressedClassPointers.java fails with \u0027Narrow klass base:\n 0x0000000000000000\u0027 missing from stdout/stderr\n + JDK-8234149: Several regression tests do not dispose Frame at\n end\n + JDK-8234347: \u0027Turkey\u0027 meta time zone does not generate\n composed localized names\n + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/\n /bug6980209.java fails in linux nightly\n + JDK-8234535: Cross compilation fails due to missing CFLAGS\n for the BUILD_CC\n + JDK-8234541: C1 emits an empty message when it inlines\n successfully\n + JDK-8234687: change javap reporting on unknown attributes\n + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK\n 11\n + JDK-8236548: Localized time zone name inconsistency between\n English and other locales\n + JDK-8236617: jtreg test containers/docker/\n /TestMemoryAwareness.java fails after 8226575\n + JDK-8237182: Update copyright header for shenandoah and\n epsilon files\n + JDK-8237888: security/infra/java/security/cert/\n /CertPathValidator/certification/LuxTrustCA.java fails when\n checking validity interval\n + JDK-8237977: Further update\n javax/net/ssl/compatibility/Compatibility.java\n + JDK-8238270: java.net HTTP/2 client does not decrease stream\n count when receives 204 response\n + JDK-8238284: [macos] Zero VM build fails due to an obvious\n typo\n + JDK-8238380: java.base/unix/native/libjava/childproc.c\n \u0027multiple definition\u0027 link errors with GCC10\n + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c\n \u0027multiple definition\u0027 link errors with GCC10\n + JDK-8238388: libj2gss/NativeFunc.o \u0027multiple definition\u0027 link\n errors with GCC10\n + JDK-8238448: RSASSA-PSS signature verification fail when\n using certain odd key sizes\n + JDK-8238710: LingeredApp doesn\u0027t log stdout/stderr if exits\n with non-zero code\n + JDK-8239083: C1 assert(known_holder == NULL ||\n (known_holder-\u003eis_instance_klass() \u0026\u0026\n (!known_holder-\u003eis_interface() ||\n ((ciInstanceKlass*)known_holder)-\u003ehas_nonstatic_concrete_methods())),\n \u0027should be non-static concrete method\u0027);\n + JDK-8239385: KerberosTicket client name refers wrongly to\n sAMAccountName in AD\n + JDK-8240169: javadoc fails to link to non-modular api docs\n + JDK-8240295: hs_err elapsed time in seconds is not accurate\n enough\n + JDK-8240360: NativeLibraryEvent has wrong library name on\n Linux\n + JDK-8240676: Meet not symmetric failure when running lucene\n on jdk8\n + JDK-8241007: Shenandoah: remove\n ShenandoahCriticalControlThreadPriority support\n + JDK-8241065: Shenandoah: remove leftover code after\n JDK-8231086\n + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is\n failing on 32bit Windows\n + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:\n java.lang.NullPointerException\n + JDK-8241138: http.nonProxyHosts=* causes\n StringIndexOutOfBoundsException in DefaultProxySelector\n + JDK-8241319: WB_GetCodeBlob doesn\u0027t have ResourceMark\n + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java\n fails with OOME\n + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure\n + JDK-8241750: x86_32 build failure after JDK-8227269\n + JDK-8242184: CRL generation error with RSASSA-PSS\n + JDK-8242283: Can\u0027t start JVM when java home path includes\n non-ASCII character\n + JDK-8242556: Cannot load RSASSA-PSS public key with non-null\n params from byte array\n + JDK-8243029: Rewrite javax/net/ssl/compatibility/\n /Compatibility.java with a flexible interop test framework\n + JDK-8243138: Enhance BaseLdapServer to support starttls\n extended request\n + JDK-8243320: Add SSL root certificates to Oracle Root CA\n program\n + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA\n program\n + JDK-8243389: enhance os::pd_print_cpu_info on linux\n + JDK-8243453: java --describe-module failed with non-ASCII\n module name under non-UTF8 environment\n + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp\n + JDK-8243489: Thread CPU Load event may contain wrong data for\n CPU time under certain conditions\n + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on\n HiDPI screens (Windows)\n + JDK-8244087: 2020-04-24 public suffix list update\n + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest\n release 1.8.26\n + JDK-8244164: AArch64: jaotc generates incorrect code for\n compressed OOPs with non-zero heap base\n + JDK-8244196: adjust output in os_linux\n + JDK-8244225: stringop-overflow warning on strncpy call from\n compile_the_world_in\n + JDK-8244287: JFR: Methods samples have line number 0\n + JDK-8244703: \u0027platform encoding not initialized\u0027 exceptions\n with debugger, JNI\n + JDK-8244719: CTW: C2 compilation fails with\n \u0027assert(!VerifyHashTableKeys || _hash_lock == 0) failed:\n remove node from hash table before modifying it\u0027\n + JDK-8244729: Shenandoah: remove resolve paths from\n SBSA::generate_shenandoah_lrb\n + JDK-8244763: Update --release 8 symbol information after JSR\n 337 MR3\n + JDK-8244818: Java2D Queue Flusher crash while moving\n application window to external monitor\n + JDK-8245151: jarsigner should not raise duplicate warnings on\n verification\n + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9\n + JDK-8245714: \u0027Bad graph detected in build_loop_late\u0027 when\n loads are pinned on loop limit check uncommon branch\n + JDK-8245801: StressRecompilation triggers assert \u0027redundunt\n OSR recompilation detected. memory leak in CodeCache!\u0027\n + JDK-8245832: JDK build make-static-libs should build all JDK\n libraries\n + JDK-8245880: Shenandoah: check class unloading flag early in\n concurrent code root scan\n + JDK-8245981: Upgrade to jQuery 3.5.1\n + JDK-8246027: Minimal fastdebug build broken after JDK-8245801\n + JDK-8246094: [macos] Sound Recording and playback is not\n working\n + JDK-8246153: TestEliminateArrayCopy fails with\n -XX:+StressReflectiveCode\n + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ\n + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest\n fails with AssertionError\n + JDK-8246203: Segmentation fault in verification due to stack\n overflow with -XX:+VerifyIterativeGVN\n + JDK-8246330: Add TLS Tests for Legacy ECDSA curves\n + JDK-8246453: TestClone crashes with \u0027all collected exceptions\n must come from the same place\u0027\n + JDK-8247246: Add explicit ResolvedJavaType.link and expose\n presence of default methods\n + JDK-8247350: [aarch64] assert(false) failed: wrong size of\n mach node\n + JDK-8247502: PhaseStringOpts crashes while optimising\n effectively dead code\n + JDK-8247615: Initialize the bytes left for the heap sampler\n + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV\n in SBC2Support::pin_and_expand\n + JDK-8247874: Replacement in VersionProps.java.template not\n working when --with-vendor-bug-url contains \u0027\u0026\u0027\n + JDK-8247979: aarch64: missing side effect of killing flags\n for clearArray_reg_reg\n + JDK-8248214: Add paddings for TaskQueueSuper to reduce\n false-sharing cache contention\n + JDK-8248219: aarch64: missing memory barrier in\n fast_storefield and fast_accessfield\n + JDK-8248348: Regression caused by the update to BCEL 6.0\n + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to\n jtreg 5.1\n + JDK-8248495: [macos] zerovm is broken due to libffi headers\n location\n + JDK-8248851: CMS: Missing memory fences between free chunk\n check and klass read\n + JDK-8248987: AOT\u0027s Linker.java seems to eagerly fail-fast on\n Windows\n + JDK-8249159: Downport test rework for SSLSocketTemplate from\n 8224650\n + JDK-8249215: JFrame::setVisible crashed with\n -Dfile.encoding=UTF-8 on Japanese Windows.\n + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is\n not highlighted in GTKLookAndFeel\n + JDK-8249255: Build fails if source code in cygwin home dir\n + JDK-8249277: TestVerifyIterativeGVN.java is failing with\n timeout in OpenJDK 11\n + JDK-8249278: Revert JDK-8226253 which breaks the spec of\n AccessibleState.SHOWING for JList\n + JDK-8249560: Shenandoah: Fix racy GC request handling\n + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle\n + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should\n account for corner cases\n + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when\n requesting TGS Kerberos tickets\n + JDK-8250609: C2 crash in IfNode::fold_compares\n + JDK-8250627: Use -XX:+/-UseContainerSupport for\n enabling/disabling Java container metrics\n + JDK-8250755: Better cleanup for\n jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java\n + JDK-8250787: Provider.put no longer registering aliases in\n FIPS env\n + JDK-8250826: jhsdb does not work with coredump which comes\n from Substrate VM\n + JDK-8250827: Shenandoah: needs to reset/finish StringTable\u0027s\n dead count before/after parallel walk\n + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check\n the bounds\n + JDK-8251117: Cannot check P11Key size in P11Cipher and\n P11AEADCipher\n + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java\n test failure\n + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with\n I-U\n + JDK-8251469: Better cleanup for\n test/jdk/javax/imageio/SetOutput.java\n + JDK-8251487: Shenandoah: missing detail timing tracking for\n final mark cleaning phase\n + JDK-8252120: compiler/oracle/TestCompileCommand.java\n misspells \u0027occured\u0027\n + JDK-8252157: JDK-8231209 11u backport breaks jmm binary\n compatibility\n + JDK-8252258: [11u] JDK-8242154 changes the default vendor\n + JDK-8252804: [test] Fix \u0027ReleaseDeflater.java\u0027 test after\n downport of 8234011\n + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)\n in JDK 11\n + JDK-8253283: [11u] Test build/translations/\n /VerifyTranslations.java failing after JDK-8252258\n + JDK-8253813: Backout JDK-8244287 from 11u: it causes several\n crashes\n + Fix regression \u00278250861: Crash in MinINode::Ideal(PhaseGVN*,\n bool)\u0027 introduced in jdk 11.0.9\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-3359,SUSE-SLE-Module-Basesystem-15-SP1-2020-3359,SUSE-SLE-Module-Basesystem-15-SP2-2020-3359,SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-3359,SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2020-3359",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3359-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:3359-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20203359-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:3359-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html"
},
{
"category": "self",
"summary": "SUSE Bug 1177943",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14779 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14781 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14782 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14796 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14803 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14803/"
}
],
"title": "Security update for java-11-openjdk",
"tracking": {
"current_release_date": "2020-11-17T12:19:11Z",
"generator": {
"date": "2020-11-17T12:19:11Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:3359-1",
"initial_release_date": "2020-11-17T12:19:11Z",
"revision_history": [
{
"date": "2020-11-17T12:19:11Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-jmods-11.0.9.0-3.48.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.aarch64",
"product": {
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.aarch64",
"product_id": "java-11-openjdk-src-11.0.9.0-3.48.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-demo-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-devel-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-headless-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-jmods-11.0.9.0-3.48.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.i586",
"product": {
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.i586",
"product_id": "java-11-openjdk-src-11.0.9.0-3.48.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"product": {
"name": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"product_id": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-jmods-11.0.9.0-3.48.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.ppc64le",
"product": {
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.ppc64le",
"product_id": "java-11-openjdk-src-11.0.9.0-3.48.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-jmods-11.0.9.0-3.48.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.s390x",
"product": {
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.s390x",
"product_id": "java-11-openjdk-src-11.0.9.0-3.48.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-accessibility-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-jmods-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-jmods-11.0.9.0-3.48.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.x86_64",
"product": {
"name": "java-11-openjdk-src-11.0.9.0-3.48.1.x86_64",
"product_id": "java-11-openjdk-src-11.0.9.0-3.48.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
},
"product_reference": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP2",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
},
"product_reference": "java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-14779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14779"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14779",
"url": "https://www.suse.com/security/cve/CVE-2020-14779"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14779",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14779"
},
{
"cve": "CVE-2020-14781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14781"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14781",
"url": "https://www.suse.com/security/cve/CVE-2020-14781"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14781",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14781"
},
{
"cve": "CVE-2020-14782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14782"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14782",
"url": "https://www.suse.com/security/cve/CVE-2020-14782"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14782",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14782"
},
{
"cve": "CVE-2020-14792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14792"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14792",
"url": "https://www.suse.com/security/cve/CVE-2020-14792"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14792",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14792"
},
{
"cve": "CVE-2020-14796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14796"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14796",
"url": "https://www.suse.com/security/cve/CVE-2020-14796"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14796",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14796"
},
{
"cve": "CVE-2020-14797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14797"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14797",
"url": "https://www.suse.com/security/cve/CVE-2020-14797"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14797",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14797"
},
{
"cve": "CVE-2020-14798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14798"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14798",
"url": "https://www.suse.com/security/cve/CVE-2020-14798"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1180063 for CVE-2020-14798",
"url": "https://bugzilla.suse.com/1180063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14798"
},
{
"cve": "CVE-2020-14803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14803"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14803",
"url": "https://www.suse.com/security/cve/CVE-2020-14803"
},
{
"category": "external",
"summary": "SUSE Bug 1177943 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1177943"
},
{
"category": "external",
"summary": "SUSE Bug 1181239 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1181239"
},
{
"category": "external",
"summary": "SUSE Bug 1182186 for CVE-2020-14803",
"url": "https://bugzilla.suse.com/1182186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-demo-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-devel-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP2:java-11-openjdk-headless-11.0.9.0-3.48.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP1:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP2:java-11-openjdk-javadoc-11.0.9.0-3.48.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-17T12:19:11Z",
"details": "moderate"
}
],
"title": "CVE-2020-14803"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…