Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-7317 (GCVE-0-2019-7317)
Vulnerability from cvelistv5 – Published: 2019-02-04 07:00 – Updated: 2024-08-04 20:46
VLAI?
EPSS
Summary
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T20:46:45.928Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2019-02-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-20T10:38:36.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-7317",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Apr/30"
},
{
"name": "DSA-4435",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4435"
},
{
"name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Apr/36"
},
{
"name": "USN-3962-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3962-1/"
},
{
"name": "USN-3991-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3991-1/"
},
{
"name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/56"
},
{
"name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/59"
},
{
"name": "DSA-4448",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4448"
},
{
"name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
},
{
"name": "RHSA-2019:1265",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"name": "RHSA-2019:1267",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"name": "RHSA-2019:1269",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"name": "DSA-4451",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "108098",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/108098"
},
{
"name": "USN-4080-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "GLSA-201908-02",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201908-02"
},
{
"name": "RHSA-2019:2494",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "RHSA-2019:2585",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803",
"refsource": "MISC",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
},
{
"name": "https://github.com/glennrp/libpng/issues/275",
"refsource": "MISC",
"url": "https://github.com/glennrp/libpng/issues/275"
},
{
"name": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20190719-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-7317",
"datePublished": "2019-02-04T07:00:00.000Z",
"dateReserved": "2019-02-04T00:00:00.000Z",
"dateUpdated": "2024-08-04T20:46:45.928Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"1.6.0\", \"versionEndExcluding\": \"1.6.37\", \"matchCriteriaId\": \"078AA00A-515F-493E-A53E-FE1937FA8018\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"712507AC-DAB8-4FFE-9426-08282919411F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\", \"matchCriteriaId\": \"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07C312A0-CD2C-4B9C-B064-6409B25C278F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C21D62F-F3DD-4E9E-B644-07CCC49F3D53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:java_se:7u221:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3999BDC1-BA77-4DBE-8041-D993BA9FF04D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:java_se:8u212:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2B2677D-6B48-45A2-8567-AB6DB9FF1B45\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32318CC6-B8C4-4429-BB8B-134DC202A27E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.0.23\", \"matchCriteriaId\": \"0185E85D-2C64-4D77-BC1D-A20165D5078E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\", \"versionEndExcluding\": \"8.7.0-00\", \"matchCriteriaId\": \"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hpe:xp7_command_view_advanced_edition_suite:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"8.7.0-00\", \"matchCriteriaId\": \"BE33C1F1-DED8-424C-8942-E1A48A9EBA05\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97D4FFCF-5309-43B6-9FD5-680C6D535A7F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF583CDC-DE9E-45AB-9861-CB203BFA8862\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1E78106-58E6-4D59-990F-75DA575BFAD9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B620311B-34A3-48A6-82DF-6F078D7A4493\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:opensuse:package_hub:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B8B0B75-0DF2-4B5C-BC81-2F8E172AEE4E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBC8B78D-1131-4F21-919D-8AC79A410FB9\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*\", \"versionEndExcluding\": \"9.6\", \"matchCriteriaId\": \"60429DC5-C403-41D1-9DDF-30782D012DF6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*\", \"versionEndExcluding\": \"9.6\", \"matchCriteriaId\": \"95571D2E-5C83-484C-A44F-AC36972C67D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:vmware_vsphere:*:*\", \"matchCriteriaId\": \"3AF659DD-C4AE-4DDC-B50B-327A717EFC74\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:windows:*:*\", \"matchCriteriaId\": \"40E21C6E-AEDF-43E8-AA80-629C77D24DF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vcenter:*:*\", \"matchCriteriaId\": \"BADA4949-F766-4092-A6BC-1B85B5FB60FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_storage_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"11.53\", \"matchCriteriaId\": \"1FC01AF8-4A4B-4FC4-B07F-1193FEFF5A47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_unified_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.2\", \"matchCriteriaId\": \"8557ED41-5B30-47C8-A556-6C1F6E8E227B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*\", \"versionEndExcluding\": \"4.0\", \"matchCriteriaId\": \"C7E42333-853D-4938-90EB-2A6653476357\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.3.9\", \"matchCriteriaId\": \"82DC1F62-0DA2-4BB8-9AFE-4BC4366205F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.1\", \"matchCriteriaId\": \"2798786F-A818-4C52-BC20-0A69DB49D16A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:oracle:*:*\", \"versionEndExcluding\": \"3.4.2\", \"matchCriteriaId\": \"41436638-0B88-4823-8208-81C01F2CA6A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:sap:*:*\", \"versionEndExcluding\": \"3.4.2\", \"matchCriteriaId\": \"910F5303-1F70-44E3-A951-567447BC46FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:oracle:*:*\", \"matchCriteriaId\": \"1925AC26-45D4-46D5-ACDD-91E5A90977B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:sap:*:*\", \"matchCriteriaId\": \"9DC6435A-8369-4D18-A6EE-84E73D6AA84D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0DF5449D-22D2-48B4-8F50-57B43DCB15B9\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5291B60-AB52-4830-8E1A-8048A471902C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"566507B6-AC95-47F7-A3FB-C6F414E45F51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87C21FE1-EA5C-498F-9C6C-D05F91A88217\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"25C8B513-76C1-4184-A253-CB32F04A05BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1CDCFF34-6F1D-45A1-BE37-6A0E17B04801\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"47811209-5CE5-4375-8391-B0A7F6A0E420\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"634C23AC-AC9C-43F4-BED8-1C720816D5E3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"37CE1DC7-72C5-483C-8921-0B462C8284D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n png_image_free en el archivo png.c en libpng versiones 1.6.x anteriores a 1.6.37, presenta un uso de la memoria previamente liberada porque la funci\\u00f3n png_image_free_function es llamada bajo png_safe_execute.\"}]",
"id": "CVE-2019-7317",
"lastModified": "2024-11-21T04:48:00.033",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.6, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.6, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 4.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2019-02-04T08:29:00.447",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"source\": \"cve@mitre.org\", \"tags\": [\"Not Applicable\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/108098\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Not Applicable\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1265\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1267\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1269\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1308\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1309\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:1310\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/glennrp/libpng/issues/275\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/30\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/Apr/36\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/56\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/59\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://seclists.org/bugtraq/2019/May/67\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201908-02\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20190719-0005/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3962-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3991-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/3997-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4435\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2019/dsa-4451\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-7317\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-02-04T08:29:00.447\",\"lastModified\":\"2024-11-21T04:48:00.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n png_image_free en el archivo png.c en libpng versiones 1.6.x anteriores a 1.6.37, presenta un uso de la memoria previamente liberada porque la funci\u00f3n png_image_free_function es llamada bajo png_safe_execute.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:N/I:N/A:P\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.6.0\",\"versionEndExcluding\":\"1.6.37\",\"matchCriteriaId\":\"078AA00A-515F-493E-A53E-FE1937FA8018\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"712507AC-DAB8-4FFE-9426-08282919411F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07C312A0-CD2C-4B9C-B064-6409B25C278F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C21D62F-F3DD-4E9E-B644-07CCC49F3D53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:java_se:7u221:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3999BDC1-BA77-4DBE-8041-D993BA9FF04D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:java_se:8u212:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B2677D-6B48-45A2-8567-AB6DB9FF1B45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32318CC6-B8C4-4429-BB8B-134DC202A27E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.0.23\",\"matchCriteriaId\":\"0185E85D-2C64-4D77-BC1D-A20165D5078E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"versionEndExcluding\":\"8.7.0-00\",\"matchCriteriaId\":\"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hpe:xp7_command_view_advanced_edition_suite:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.7.0-00\",\"matchCriteriaId\":\"BE33C1F1-DED8-424C-8942-E1A48A9EBA05\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97D4FFCF-5309-43B6-9FD5-680C6D535A7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF583CDC-DE9E-45AB-9861-CB203BFA8862\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:opensuse:package_hub:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B8B0B75-0DF2-4B5C-BC81-2F8E172AEE4E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBC8B78D-1131-4F21-919D-8AC79A410FB9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"60429DC5-C403-41D1-9DDF-30782D012DF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"95571D2E-5C83-484C-A44F-AC36972C67D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3AF659DD-C4AE-4DDC-B50B-327A717EFC74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:9.6:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"40E21C6E-AEDF-43E8-AA80-629C77D24DF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vcenter:*:*\",\"matchCriteriaId\":\"BADA4949-F766-4092-A6BC-1B85B5FB60FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.53\",\"matchCriteriaId\":\"1FC01AF8-4A4B-4FC4-B07F-1193FEFF5A47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_unified_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.2\",\"matchCriteriaId\":\"8557ED41-5B30-47C8-A556-6C1F6E8E227B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*\",\"versionEndExcluding\":\"4.0\",\"matchCriteriaId\":\"C7E42333-853D-4938-90EB-2A6653476357\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"7.3.9\",\"matchCriteriaId\":\"82DC1F62-0DA2-4BB8-9AFE-4BC4366205F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1\",\"matchCriteriaId\":\"2798786F-A818-4C52-BC20-0A69DB49D16A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:oracle:*:*\",\"versionEndExcluding\":\"3.4.2\",\"matchCriteriaId\":\"41436638-0B88-4823-8208-81C01F2CA6A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:*:*:*:*:*:sap:*:*\",\"versionEndExcluding\":\"3.4.2\",\"matchCriteriaId\":\"910F5303-1F70-44E3-A951-567447BC46FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:oracle:*:*\",\"matchCriteriaId\":\"1925AC26-45D4-46D5-ACDD-91E5A90977B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:3.4.2:p1:*:*:*:sap:*:*\",\"matchCriteriaId\":\"9DC6435A-8369-4D18-A6EE-84E73D6AA84D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DF5449D-22D2-48B4-8F50-57B43DCB15B9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5291B60-AB52-4830-8E1A-8048A471902C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"566507B6-AC95-47F7-A3FB-C6F414E45F51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87C21FE1-EA5C-498F-9C6C-D05F91A88217\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25C8B513-76C1-4184-A253-CB32F04A05BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CDCFF34-6F1D-45A1-BE37-6A0E17B04801\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47811209-5CE5-4375-8391-B0A7F6A0E420\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634C23AC-AC9C-43F4-BED8-1C720816D5E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37CE1DC7-72C5-483C-8921-0B462C8284D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108098\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1265\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1267\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1269\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/glennrp/libpng/issues/275\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/30\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/36\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/56\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/59\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201908-02\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190719-0005/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3962-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3991-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4435\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4448\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108098\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1265\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1267\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1269\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/glennrp/libpng/issues/275\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Apr/36\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/56\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/59\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201908-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190719-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3962-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3991-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4435\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}"
}
}
SUSE-SU-2019:1388-1
Vulnerability from csaf_suse - Published: 2019-05-31 08:11 - Updated: 2019-05-31 08:11Summary
Security update for MozillaFirefox
Notes
Title of the patch
Security update for MozillaFirefox
Description of the patch
This update for MozillaFirefox fixes the following issues:
Security issues fixed:
- CVE-2019-11691: Use-after-free in XMLHttpRequest
- CVE-2019-11692: Use-after-free removing listeners in the event listener manager
- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
- CVE-2019-7317: Use-after-free in png_image_free of libpng library
- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
- CVE-2019-9816: Type confusion with object groups and UnboxedObjects
- CVE-2019-9817: Stealing of cross-domain images using canvas
- CVE-2019-9818: Use-after-free in crash generation server
- CVE-2019-9819: Compartment mismatch with fetch API
- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
Non-security issues fixed:
- Font and date adjustments to accommodate the new Reiwa era in Japan
- Update to Firefox ESR 60.7 (bsc#1135824)
Patchnames
SUSE-2019-1388,SUSE-OpenStack-Cloud-7-2019-1388,SUSE-SLE-DESKTOP-12-SP3-2019-1388,SUSE-SLE-DESKTOP-12-SP4-2019-1388,SUSE-SLE-SAP-12-SP1-2019-1388,SUSE-SLE-SAP-12-SP2-2019-1388,SUSE-SLE-SDK-12-SP3-2019-1388,SUSE-SLE-SDK-12-SP4-2019-1388,SUSE-SLE-SERVER-12-2019-1388,SUSE-SLE-SERVER-12-SP1-2019-1388,SUSE-SLE-SERVER-12-SP2-2019-1388,SUSE-SLE-SERVER-12-SP2-BCL-2019-1388,SUSE-SLE-SERVER-12-SP3-2019-1388,SUSE-SLE-SERVER-12-SP4-2019-1388,SUSE-Storage-4-2019-1388
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11691: Use-after-free in XMLHttpRequest\n- CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox\n- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n- CVE-2019-7317: Use-after-free in png_image_free of libpng library\n- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n- CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n- CVE-2019-9817: Stealing of cross-domain images using canvas\n- CVE-2019-9818: Use-after-free in crash generation server\n- CVE-2019-9819: Compartment mismatch with fetch API\n- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n\nNon-security issues fixed:\n\n- Font and date adjustments to accommodate the new Reiwa era in Japan\n- Update to Firefox ESR 60.7 (bsc#1135824)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1388,SUSE-OpenStack-Cloud-7-2019-1388,SUSE-SLE-DESKTOP-12-SP3-2019-1388,SUSE-SLE-DESKTOP-12-SP4-2019-1388,SUSE-SLE-SAP-12-SP1-2019-1388,SUSE-SLE-SAP-12-SP2-2019-1388,SUSE-SLE-SDK-12-SP3-2019-1388,SUSE-SLE-SDK-12-SP4-2019-1388,SUSE-SLE-SERVER-12-2019-1388,SUSE-SLE-SERVER-12-SP1-2019-1388,SUSE-SLE-SERVER-12-SP2-2019-1388,SUSE-SLE-SERVER-12-SP2-BCL-2019-1388,SUSE-SLE-SERVER-12-SP3-2019-1388,SUSE-SLE-SERVER-12-SP4-2019-1388,SUSE-Storage-4-2019-1388",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1388-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1388-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191388-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1388-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-May/005524.html"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2019-05-31T08:11:53Z",
"generator": {
"date": "2019-05-31T08:11:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1388-1",
"initial_release_date": "2019-05-31T08:11:53Z",
"revision_history": [
{
"date": "2019-05-31T08:11:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.i686"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.i686"
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64",
"product_id": "MozillaFirefox-translations-other-60.7.0-109.72.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
"product_id": "SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
"product_id": "SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Enterprise Storage 4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP3:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-devel-60.7.0-109.72.1.x86_64",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.s390x",
"SUSE OpenStack Cloud 7:MozillaFirefox-translations-common-60.7.0-109.72.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T08:11:53Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:2291-1
Vulnerability from csaf_suse - Published: 2019-09-04 14:48 - Updated: 2019-09-04 14:48Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 5 Fix Pack 40.
Security issues fixed:
- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).
Patchnames
SUSE-2019-2291,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2291,SUSE-SLE-Module-Legacy-15-2019-2291,SUSE-SLE-Module-Legacy-15-SP1-2019-2291
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2291,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2291,SUSE-SLE-Module-Legacy-15-2019-2291,SUSE-SLE-Module-Legacy-15-SP1-2019-2291",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2291-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2291-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2291-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html"
},
{
"category": "self",
"summary": "SUSE Bug 1122292",
"url": "https://bugzilla.suse.com/1122292"
},
{
"category": "self",
"summary": "SUSE Bug 1122299",
"url": "https://bugzilla.suse.com/1122299"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11772 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2449 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2019-09-04T14:48:56Z",
"generator": {
"date": "2019-09-04T14:48:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2291-1",
"initial_release_date": "2019-09-04T14:48:56Z",
"revision_history": [
{
"date": "2019-09-04T14:48:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.i586",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.i586",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.ppc64le",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.ppc64le",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.s390x",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.s390x",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.s390x",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.s390x",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.x86_64",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-3.24.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11772"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11772",
"url": "https://www.suse.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11772",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-11772"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2449"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2449",
"url": "https://www.suse.com/security/cve/CVE-2019-2449"
},
{
"category": "external",
"summary": "SUSE Bug 1122292 for CVE-2019-2449",
"url": "https://bugzilla.suse.com/1122292"
},
{
"category": "external",
"summary": "SUSE Bug 1132734 for CVE-2019-2449",
"url": "https://bugzilla.suse.com/1132734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2449"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T14:48:56Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:3060-2
Vulnerability from csaf_suse - Published: 2020-03-03 10:44 - Updated: 2020-03-03 10:44Summary
Security update for libpng16
Notes
Title of the patch
Security update for libpng16
Description of the patch
This update for libpng16 fixes the following issues:
Security issues fixed:
- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when
png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks (bsc#1141493).
Patchnames
SUSE-2019-3060,SUSE-OpenStack-Cloud-7-2020-569,SUSE-OpenStack-Cloud-8-2020-569,SUSE-SLE-SAP-12-SP1-2020-569,SUSE-SLE-SAP-12-SP2-2020-569,SUSE-SLE-SAP-12-SP3-2020-569,SUSE-SLE-SERVER-12-SP1-2020-569,SUSE-SLE-SERVER-12-SP2-2020-569,SUSE-SLE-SERVER-12-SP2-BCL-2020-569,SUSE-SLE-SERVER-12-SP3-2020-569,SUSE-SLE-SERVER-12-SP3-BCL-2020-569,SUSE-Storage-5-2020-569
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libpng16",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libpng16 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when\n png_image_free() was called under png_safe_execute (bsc#1124211).\n- CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks (bsc#1141493).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-3060,SUSE-OpenStack-Cloud-7-2020-569,SUSE-OpenStack-Cloud-8-2020-569,SUSE-SLE-SAP-12-SP1-2020-569,SUSE-SLE-SAP-12-SP2-2020-569,SUSE-SLE-SAP-12-SP3-2020-569,SUSE-SLE-SERVER-12-SP1-2020-569,SUSE-SLE-SERVER-12-SP2-2020-569,SUSE-SLE-SERVER-12-SP2-BCL-2020-569,SUSE-SLE-SERVER-12-SP3-2020-569,SUSE-SLE-SERVER-12-SP3-BCL-2020-569,SUSE-Storage-5-2020-569",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3060-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:3060-2",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193060-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:3060-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-March/006567.html"
},
{
"category": "self",
"summary": "SUSE Bug 1124211",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "self",
"summary": "SUSE Bug 1141493",
"url": "https://bugzilla.suse.com/1141493"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-12652 page",
"url": "https://www.suse.com/security/cve/CVE-2017-12652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for libpng16",
"tracking": {
"current_release_date": "2020-03-03T10:44:35Z",
"generator": {
"date": "2020-03-03T10:44:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:3060-2",
"initial_release_date": "2020-03-03T10:44:35Z",
"revision_history": [
{
"date": "2020-03-03T10:44:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.8-15.5.2.aarch64",
"product": {
"name": "libpng16-16-1.6.8-15.5.2.aarch64",
"product_id": "libpng16-16-1.6.8-15.5.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.8-15.5.2.ppc64le",
"product": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le",
"product_id": "libpng16-16-1.6.8-15.5.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.8-15.5.2.s390x",
"product": {
"name": "libpng16-16-1.6.8-15.5.2.s390x",
"product_id": "libpng16-16-1.6.8-15.5.2.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"product": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"product_id": "libpng16-16-32bit-1.6.8-15.5.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.8-15.5.2.x86_64",
"product": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64",
"product_id": "libpng16-16-1.6.8-15.5.2.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"product_id": "libpng16-16-32bit-1.6.8-15.5.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 5",
"product": {
"name": "SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.8-15.5.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.8-15.5.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-12652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-12652"
}
],
"notes": [
{
"category": "general",
"text": "libpng before 1.6.32 does not properly check the length of chunks against the user limit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-12652",
"url": "https://www.suse.com/security/cve/CVE-2017-12652"
},
{
"category": "external",
"summary": "SUSE Bug 1141493 for CVE-2017-12652",
"url": "https://bugzilla.suse.com/1141493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-03T10:44:35Z",
"details": "low"
}
],
"title": "CVE-2017-12652"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Enterprise Storage 5:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.s390x",
"SUSE OpenStack Cloud 7:libpng16-16-32bit-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-1.6.8-15.5.2.x86_64",
"SUSE OpenStack Cloud 8:libpng16-16-32bit-1.6.8-15.5.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-03-03T10:44:35Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:14160-1
Vulnerability from csaf_suse - Published: 2019-09-04 08:05 - Updated: 2019-09-04 08:05Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
This update for java-1_7_1-ibm fixes the following issues:
Update to Java 7.1 Service Refresh 4 Fix Pack 50.
Security issues fixed:
- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Patchnames
slessp4-java-1_7_1-ibm-14160
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 50.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp4-java-1_7_1-ibm-14160",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14160-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:14160-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914160-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:14160-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-September/005877.html"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2019-09-04T08:05:57Z",
"generator": {
"date": "2019-09-04T08:05:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:14160-1",
"initial_release_date": "2019-09-04T08:05:57Z",
"revision_history": [
{
"date": "2019-09-04T08:05:57Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.s390x",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-26.44.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.i586",
"SUSE Linux Enterprise Server 11 SP4-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-26.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-04T08:05:57Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2036-1
Vulnerability from csaf_suse - Published: 2019-08-01 15:36 - Updated: 2019-08-01 15:36Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- Certificate validation improvements
Non-security issue fixed:
- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Patchnames
HPE-Helion-OpenStack-8-2019-2036,SUSE-2019-2036,SUSE-OpenStack-Cloud-7-2019-2036,SUSE-OpenStack-Cloud-8-2019-2036,SUSE-OpenStack-Cloud-Crowbar-8-2019-2036,SUSE-SLE-DESKTOP-12-SP4-2019-2036,SUSE-SLE-DESKTOP-12-SP5-2019-2036,SUSE-SLE-SAP-12-SP1-2019-2036,SUSE-SLE-SAP-12-SP2-2019-2036,SUSE-SLE-SAP-12-SP3-2019-2036,SUSE-SLE-SERVER-12-SP1-2019-2036,SUSE-SLE-SERVER-12-SP2-2019-2036,SUSE-SLE-SERVER-12-SP2-BCL-2019-2036,SUSE-SLE-SERVER-12-SP3-2019-2036,SUSE-SLE-SERVER-12-SP3-BCL-2019-2036,SUSE-SLE-SERVER-12-SP4-2019-2036,SUSE-SLE-SERVER-12-SP5-2019-2036,SUSE-Storage-4-2019-2036,SUSE-Storage-5-2019-2036
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- Certificate validation improvements\n\nNon-security issue fixed:\n\n- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "HPE-Helion-OpenStack-8-2019-2036,SUSE-2019-2036,SUSE-OpenStack-Cloud-7-2019-2036,SUSE-OpenStack-Cloud-8-2019-2036,SUSE-OpenStack-Cloud-Crowbar-8-2019-2036,SUSE-SLE-DESKTOP-12-SP4-2019-2036,SUSE-SLE-DESKTOP-12-SP5-2019-2036,SUSE-SLE-SAP-12-SP1-2019-2036,SUSE-SLE-SAP-12-SP2-2019-2036,SUSE-SLE-SAP-12-SP3-2019-2036,SUSE-SLE-SERVER-12-SP1-2019-2036,SUSE-SLE-SERVER-12-SP2-2019-2036,SUSE-SLE-SERVER-12-SP2-BCL-2019-2036,SUSE-SLE-SERVER-12-SP3-2019-2036,SUSE-SLE-SERVER-12-SP3-BCL-2019-2036,SUSE-SLE-SERVER-12-SP4-2019-2036,SUSE-SLE-SERVER-12-SP5-2019-2036,SUSE-Storage-4-2019-2036,SUSE-Storage-5-2019-2036",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2036-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2036-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192036-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2036-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-August/005767.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-08-01T15:36:09Z",
"generator": {
"date": "2019-08-01T15:36:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2036-1",
"initial_release_date": "2019-08-01T15:36:09Z",
"revision_history": [
{
"date": "2019-08-01T15:36:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Helion OpenStack 8",
"product": {
"name": "HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:hpe-helion-openstack:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 5",
"product": {
"name": "SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2002-1
Vulnerability from csaf_suse - Published: 2019-07-29 11:00 - Updated: 2019-07-29 11:00Summary
Security update for java-11-openjdk
Notes
Title of the patch
Security update for java-11-openjdk
Description of the patch
This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-7317: Improve PNG support options (bsc#1141780).
- CVE-2019-2818: Better Poly1305 support (bsc#1141788).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
- Certificate validation improvements
Non-security issues fixed:
- Do not fail installation when the manpages are not present (bsc#1115375)
- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if
there is whitespace after the header or footer (bsc#1140461)
Patchnames
SUSE-2019-2002,SUSE-SLE-Module-Basesystem-15-2019-2002,SUSE-SLE-Module-Basesystem-15-SP1-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2002
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-11-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-7317: Improve PNG support options (bsc#1141780).\n- CVE-2019-2818: Better Poly1305 support (bsc#1141788).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).\n- Certificate validation improvements\n\nNon-security issues fixed:\n\n- Do not fail installation when the manpages are not present (bsc#1115375)\n- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if\n there is whitespace after the header or footer (bsc#1140461)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2002,SUSE-SLE-Module-Basesystem-15-2019-2002,SUSE-SLE-Module-Basesystem-15-SP1-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2002,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2002",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2002-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2002-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2002-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1140461",
"url": "https://bugzilla.suse.com/1140461"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141781",
"url": "https://bugzilla.suse.com/1141781"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141788",
"url": "https://bugzilla.suse.com/1141788"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-11-openjdk",
"tracking": {
"current_release_date": "2019-07-29T11:00:36Z",
"generator": {
"date": "2019-07-29T11:00:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2002-1",
"initial_release_date": "2019-07-29T11:00:36Z",
"revision_history": [
{
"date": "2019-07-29T11:00:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.i586"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.i586",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.i586",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch",
"product": {
"name": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch",
"product_id": "java-11-openjdk-javadoc-11.0.4.0-3.33.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-accessibility-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-jmods-11.0.4.0-3.33.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64",
"product": {
"name": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64",
"product_id": "java-11-openjdk-src-11.0.4.0-3.33.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2818"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2818",
"url": "https://www.suse.com/security/cve/CVE-2019-2818"
},
{
"category": "external",
"summary": "SUSE Bug 1141788 for CVE-2019-2818",
"url": "https://bugzilla.suse.com/1141788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2818"
},
{
"cve": "CVE-2019-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2821"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2821",
"url": "https://www.suse.com/security/cve/CVE-2019-2821"
},
{
"category": "external",
"summary": "SUSE Bug 1141781 for CVE-2019-2821",
"url": "https://bugzilla.suse.com/1141781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-2821"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-demo-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-devel-11.0.4.0-3.33.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:java-11-openjdk-headless-11.0.4.0-3.33.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-29T11:00:36Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1458-1
Vulnerability from csaf_suse - Published: 2019-06-11 08:09 - Updated: 2019-06-11 08:09Summary
Security update for MozillaThunderbird
Notes
Title of the patch
Security update for MozillaThunderbird
Description of the patch
This update for MozillaThunderbird fixes the following issues:
Mozilla Thunderbird was updated to 60.7.0.
* Attachment pane of Write window no longer focussed when attaching
files using a keyboard shortcut
These security issues were fixed (MFSA 2019-15 bsc#1135824):
* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
* CVE-2019-9816: Type confusion with object groups and UnboxedObjects
* CVE-2019-9817: Stealing of cross-domain images using canvas
* CVE-2019-9818: Use-after-free in crash generation server
* CVE-2019-9819: Compartment mismatch with fetch API
* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
* CVE-2019-11691: Use-after-free in XMLHttpRequest
* CVE-2019-11692: Use-after-free removing listeners in the event listener manager
* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
* CVE-2019-7317: Use-after-free in png_image_free of libpng library
* CVE-2019-9797: Cross-origin theft of images with createImageBitmap
* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
* CVE-2019-5798: Out-of-bounds read in Skia
* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
Patchnames
SUSE-2019-1458,SUSE-SLE-Product-WE-15-2019-1458,SUSE-SLE-Product-WE-15-SP1-2019-1458
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaThunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 60.7.0.\n\n* Attachment pane of Write window no longer focussed when attaching\n files using a keyboard shortcut\n\nThese security issues were fixed (MFSA 2019-15 bsc#1135824):\n\n* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n* CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n* CVE-2019-9817: Stealing of cross-domain images using canvas\n* CVE-2019-9818: Use-after-free in crash generation server\n* CVE-2019-9819: Compartment mismatch with fetch API\n* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n* CVE-2019-11691: Use-after-free in XMLHttpRequest\n* CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n* CVE-2019-7317: Use-after-free in png_image_free of libpng library\n* CVE-2019-9797: Cross-origin theft of images with createImageBitmap\n* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext\n* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox\n* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n* CVE-2019-5798: Out-of-bounds read in Skia\n* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1458,SUSE-SLE-Product-WE-15-2019-1458,SUSE-SLE-Product-WE-15-SP1-2019-1458",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1458-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1458-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191458-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1458-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html"
},
{
"category": "self",
"summary": "SUSE Bug 1130694",
"url": "https://bugzilla.suse.com/1130694"
},
{
"category": "self",
"summary": "SUSE Bug 1133267",
"url": "https://bugzilla.suse.com/1133267"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaThunderbird",
"tracking": {
"current_release_date": "2019-06-11T08:09:40Z",
"generator": {
"date": "2019-06-11T08:09:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1458-1",
"initial_release_date": "2019-06-11T08:09:40Z",
"revision_history": [
{
"date": "2019-06-11T08:09:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:2021-1
Vulnerability from csaf_suse - Published: 2019-07-30 14:39 - Updated: 2019-07-30 14:39Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- Certificate validation improvements
Non-security issue fixed:
- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Patchnames
SUSE-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2021,SUSE-SLE-Module-Legacy-15-2019-2021,SUSE-SLE-Module-Legacy-15-SP1-2019-2021,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-2021
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- Certificate validation improvements\n\nNon-security issue fixed:\n\n- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2021,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2021,SUSE-SLE-Module-Legacy-15-2019-2021,SUSE-SLE-Module-Legacy-15-SP1-2019-2021,SUSE-SLE-Module-Packagehub-Subpackages-15-2019-2021",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2021-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2021-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192021-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2021-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-07-30T14:39:13Z",
"generator": {
"date": "2019-07-30T14:39:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2021-1",
"initial_release_date": "2019-07-30T14:39:13Z",
"revision_history": [
{
"date": "2019-07-30T14:39:13Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-3.24.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
"product_id": "SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch as component of SUSE Linux Enterprise Module for Package Hub 15",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP1:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-demo-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-devel-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.aarch64",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.s390x",
"SUSE Linux Enterprise Module for Legacy 15:java-1_8_0-openjdk-headless-1.8.0.222-3.24.2.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15:java-1_8_0-openjdk-javadoc-1.8.0.222-3.24.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-30T14:39:13Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2371-1
Vulnerability from csaf_suse - Published: 2019-09-12 11:32 - Updated: 2019-09-12 11:32Summary
Security update for java-1_8_0-ibm
Notes
Title of the patch
Security update for java-1_8_0-ibm
Description of the patch
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 5 Fix Pack 40.
Security issues fixed:
- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).
Patchnames
HPE-Helion-OpenStack-8-2019-2371,SUSE-2019-2371,SUSE-OpenStack-Cloud-7-2019-2371,SUSE-OpenStack-Cloud-8-2019-2371,SUSE-OpenStack-Cloud-Crowbar-8-2019-2371,SUSE-SLE-SAP-12-SP1-2019-2371,SUSE-SLE-SAP-12-SP2-2019-2371,SUSE-SLE-SAP-12-SP3-2019-2371,SUSE-SLE-SDK-12-SP4-2019-2371,SUSE-SLE-SDK-12-SP5-2019-2371,SUSE-SLE-SERVER-12-SP1-2019-2371,SUSE-SLE-SERVER-12-SP2-2019-2371,SUSE-SLE-SERVER-12-SP2-BCL-2019-2371,SUSE-SLE-SERVER-12-SP3-2019-2371,SUSE-SLE-SERVER-12-SP3-BCL-2019-2371,SUSE-SLE-SERVER-12-SP4-2019-2371,SUSE-SLE-SERVER-12-SP5-2019-2371,SUSE-Storage-4-2019-2371,SUSE-Storage-5-2019-2371
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "HPE-Helion-OpenStack-8-2019-2371,SUSE-2019-2371,SUSE-OpenStack-Cloud-7-2019-2371,SUSE-OpenStack-Cloud-8-2019-2371,SUSE-OpenStack-Cloud-Crowbar-8-2019-2371,SUSE-SLE-SAP-12-SP1-2019-2371,SUSE-SLE-SAP-12-SP2-2019-2371,SUSE-SLE-SAP-12-SP3-2019-2371,SUSE-SLE-SDK-12-SP4-2019-2371,SUSE-SLE-SDK-12-SP5-2019-2371,SUSE-SLE-SERVER-12-SP1-2019-2371,SUSE-SLE-SERVER-12-SP2-2019-2371,SUSE-SLE-SERVER-12-SP2-BCL-2019-2371,SUSE-SLE-SERVER-12-SP3-2019-2371,SUSE-SLE-SERVER-12-SP3-BCL-2019-2371,SUSE-SLE-SERVER-12-SP4-2019-2371,SUSE-SLE-SERVER-12-SP5-2019-2371,SUSE-Storage-4-2019-2371,SUSE-Storage-5-2019-2371",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2371-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2371-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2371-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1.html"
},
{
"category": "self",
"summary": "SUSE Bug 1122292",
"url": "https://bugzilla.suse.com/1122292"
},
{
"category": "self",
"summary": "SUSE Bug 1122299",
"url": "https://bugzilla.suse.com/1122299"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-11212 page",
"url": "https://www.suse.com/security/cve/CVE-2018-11212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11772 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2449 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-ibm",
"tracking": {
"current_release_date": "2019-09-12T11:32:19Z",
"generator": {
"date": "2019-09-12T11:32:19Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2371-1",
"initial_release_date": "2019-09-12T11:32:19Z",
"revision_history": [
{
"date": "2019-09-12T11:32:19Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.i586",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.i586",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.ppc64le",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.ppc64le",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.ppc64le",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390x",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390x",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-32bit-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-demo-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-devel-32bit-1.8.0_sr5.40-30.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.x86_64",
"product": {
"name": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.x86_64",
"product_id": "java-1_8_0-ibm-src-1.8.0_sr5.40-30.54.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Helion OpenStack 8",
"product": {
"name": "HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:hpe-helion-openstack:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 5",
"product": {
"name": "SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
},
"product_reference": "java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-11212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-11212"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-11212",
"url": "https://www.suse.com/security/cve/CVE-2018-11212"
},
{
"category": "external",
"summary": "SUSE Bug 1122299 for CVE-2018-11212",
"url": "https://bugzilla.suse.com/1122299"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "low"
}
],
"title": "CVE-2018-11212"
},
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11772"
}
],
"notes": [
{
"category": "general",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11772",
"url": "https://www.suse.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11772",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-11772"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2449"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2449",
"url": "https://www.suse.com/security/cve/CVE-2019-2449"
},
{
"category": "external",
"summary": "SUSE Bug 1122292 for CVE-2019-2449",
"url": "https://bugzilla.suse.com/1122292"
},
{
"category": "external",
"summary": "SUSE Bug 1132734 for CVE-2019-2449",
"url": "https://bugzilla.suse.com/1132734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2449"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"HPE Helion OpenStack 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.s390x",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-devel-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-12T11:32:19Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1398-1
Vulnerability from csaf_suse - Published: 2019-05-31 10:54 - Updated: 2019-05-31 10:54Summary
Security update for libpng16
Notes
Title of the patch
Security update for libpng16
Description of the patch
This update for libpng16 fixes the following issues:
Security issues fixed:
- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when
png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2018-13785: Fixed a wrong calculation of row_factor in the
png_check_chunk_length function in pngrutil.c, which could haved triggered
and integer overflow and result in an divide-by-zero while processing a
crafted PNG file, leading to a denial of service (bsc#1100687)
Patchnames
SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1398
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libpng16",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libpng16 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when \n png_image_free() was called under png_safe_execute (bsc#1124211).\n- CVE-2018-13785: Fixed a wrong calculation of row_factor in the\n png_check_chunk_length function in pngrutil.c, which could haved triggered\n and integer overflow and result in an divide-by-zero while processing a\n crafted PNG file, leading to a denial of service (bsc#1100687)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1398",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1398-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1398-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191398-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1398-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-May/005525.html"
},
{
"category": "self",
"summary": "SUSE Bug 1100687",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "self",
"summary": "SUSE Bug 1121624",
"url": "https://bugzilla.suse.com/1121624"
},
{
"category": "self",
"summary": "SUSE Bug 1124211",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for libpng16",
"tracking": {
"current_release_date": "2019-05-31T10:54:25Z",
"generator": {
"date": "2019-05-31T10:54:25Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1398-1",
"initial_release_date": "2019-05-31T10:54:25Z",
"revision_history": [
{
"date": "2019-05-31T10:54:25Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-16-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-tools-1.6.34-3.9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product_id": "libpng16-16-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product_id": "libpng16-tools-1.6.34-3.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-16-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-tools-1.6.34-3.9.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product_id": "libpng16-16-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product_id": "libpng16-tools-1.6.34-3.9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-tools-1.6.34-3.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T10:54:25Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-05-31T10:54:25Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1405-1
Vulnerability from csaf_suse - Published: 2019-06-03 11:30 - Updated: 2019-06-03 11:30Summary
Security update for MozillaFirefox
Notes
Title of the patch
Security update for MozillaFirefox
Description of the patch
This update for MozillaFirefox fixes the following issues:
Security issues fixed:
- CVE-2019-11691: Use-after-free in XMLHttpRequest
- CVE-2019-11692: Use-after-free removing listeners in the event listener manager
- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
- CVE-2019-7317: Use-after-free in png_image_free of libpng library
- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
- CVE-2019-9816: Type confusion with object groups and UnboxedObjects
- CVE-2019-9817: Stealing of cross-domain images using canvas
- CVE-2019-9818: Use-after-free in crash generation server
- CVE-2019-9819: Compartment mismatch with fetch API
- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
Non-security issues fixed:
- Font and date adjustments to accommodate the new Reiwa era in Japan
- Update to Firefox ESR 60.7 (bsc#1135824)
Patchnames
SUSE-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1405
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11691: Use-after-free in XMLHttpRequest\n- CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox\n- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n- CVE-2019-7317: Use-after-free in png_image_free of libpng library\n- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n- CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n- CVE-2019-9817: Stealing of cross-domain images using canvas\n- CVE-2019-9818: Use-after-free in crash generation server\n- CVE-2019-9819: Compartment mismatch with fetch API\n- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n\nNon-security issues fixed:\n\n- Font and date adjustments to accommodate the new Reiwa era in Japan\n- Update to Firefox ESR 60.7 (bsc#1135824)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-2019-1405,SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-2019-1405,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1405",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1405-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1405-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191405-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1405-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2019-06-03T11:30:37Z",
"generator": {
"date": "2019-06-03T11:30:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1405-1",
"initial_release_date": "2019-06-03T11:30:37Z",
"revision_history": [
{
"date": "2019-06-03T11:30:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-buildsymbols-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"product_id": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-60.7.0-3.40.6.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-60.7.0-3.40.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-03T11:30:37Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
SUSE-SU-2019:2028-1
Vulnerability from csaf_suse - Published: 2019-07-31 11:34 - Updated: 2019-07-31 11:34Summary
Security update for java-1_7_0-openjdk
Notes
Title of the patch
Security update for java-1_7_0-openjdk
Description of the patch
This update for java-1_7_0-openjdk to version 7u231 fixes the following issues:
Security issues fixed:
- CVE_2019-2426: Improve web server connections (bsc#1134297).
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082).
- Certificate validation improvements
Patchnames
SUSE-2019-2028,SUSE-SLE-DESKTOP-12-SP4-2019-2028,SUSE-SLE-SERVER-12-SP4-2019-2028
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-openjdk to version 7u231 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE_2019-2426: Improve web server connections (bsc#1134297).\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082).\n- Certificate validation improvements\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2028,SUSE-SLE-DESKTOP-12-SP4-2019-2028,SUSE-SLE-SERVER-12-SP4-2019-2028",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2028-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2028-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192028-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2028-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005762.html"
},
{
"category": "self",
"summary": "SUSE Bug 1087082",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "self",
"summary": "SUSE Bug 1134297",
"url": "https://bugzilla.suse.com/1134297"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-3639 page",
"url": "https://www.suse.com/security/cve/CVE-2018-3639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2426 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_0-openjdk",
"tracking": {
"current_release_date": "2019-07-31T11:34:53Z",
"generator": {
"date": "2019-07-31T11:34:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2028-1",
"initial_release_date": "2019-07-31T11:34:53Z",
"revision_history": [
{
"date": "2019-07-31T11:34:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.aarch64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.aarch64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.i586",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.i586",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-javadoc-1.7.0.231-43.27.2.noarch",
"product": {
"name": "java-1_7_0-openjdk-javadoc-1.7.0.231-43.27.2.noarch",
"product_id": "java-1_7_0-openjdk-javadoc-1.7.0.231-43.27.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.ppc64le",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.ppc64le",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390x",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390x",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-accessibility-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-devel-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-bootstrap-headless-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.x86_64",
"product": {
"name": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.x86_64",
"product_id": "java-1_7_0-openjdk-src-1.7.0.231-43.27.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
},
"product_reference": "java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-3639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-3639"
}
],
"notes": [
{
"category": "general",
"text": "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-3639",
"url": "https://www.suse.com/security/cve/CVE-2018-3639"
},
{
"category": "external",
"summary": "SUSE Bug 1074701 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1074701"
},
{
"category": "external",
"summary": "SUSE Bug 1085235 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085235"
},
{
"category": "external",
"summary": "SUSE Bug 1085308 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1085308"
},
{
"category": "external",
"summary": "SUSE Bug 1087078 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087078"
},
{
"category": "external",
"summary": "SUSE Bug 1087082 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1087082"
},
{
"category": "external",
"summary": "SUSE Bug 1092631 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092631"
},
{
"category": "external",
"summary": "SUSE Bug 1092885 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1092885"
},
{
"category": "external",
"summary": "SUSE Bug 1094912 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1094912"
},
{
"category": "external",
"summary": "SUSE Bug 1098813 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1098813"
},
{
"category": "external",
"summary": "SUSE Bug 1100394 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1100394"
},
{
"category": "external",
"summary": "SUSE Bug 1102640 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1102640"
},
{
"category": "external",
"summary": "SUSE Bug 1105412 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1105412"
},
{
"category": "external",
"summary": "SUSE Bug 1111963 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1111963"
},
{
"category": "external",
"summary": "SUSE Bug 1172781 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172781"
},
{
"category": "external",
"summary": "SUSE Bug 1172782 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172782"
},
{
"category": "external",
"summary": "SUSE Bug 1172783 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1172783"
},
{
"category": "external",
"summary": "SUSE Bug 1173489 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1173489"
},
{
"category": "external",
"summary": "SUSE Bug 1178658 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1178658"
},
{
"category": "external",
"summary": "SUSE Bug 1201877 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1201877"
},
{
"category": "external",
"summary": "SUSE Bug 1215674 for CVE-2018-3639",
"url": "https://bugzilla.suse.com/1215674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2018-3639"
},
{
"cve": "CVE-2019-2426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2426"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2426",
"url": "https://www.suse.com/security/cve/CVE-2019-2426"
},
{
"category": "external",
"summary": "SUSE Bug 1134297 for CVE-2019-2426",
"url": "https://bugzilla.suse.com/1134297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2426"
},
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-demo-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-devel-1.7.0.231-43.27.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_0-openjdk-headless-1.7.0.231-43.27.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-31T11:34:53Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:14188-1
Vulnerability from csaf_suse - Published: 2019-10-04 08:10 - Updated: 2019-10-04 08:10Summary
Security update for java-1_7_0-ibm
Notes
Title of the patch
Security update for java-1_7_0-ibm
Description of the patch
This update for java-1_7_0-ibm fixes the following issues:
Update to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).
Security issues fixed:
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).
- CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).
- CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).
- CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).
- CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).
Patchnames
sleposp3-java-1_7_0-ibm-14188
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_0-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_0-ibm fixes the following issues:\n\t \nUpdate to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).\n\nSecurity issues fixed:\n\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).\n- CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).\n- CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).\n- CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).\n- CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sleposp3-java-1_7_0-ibm-14188",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14188-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:14188-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914188-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:14188-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-October/005987.html"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_0-ibm",
"tracking": {
"current_release_date": "2019-10-04T08:10:04Z",
"generator": {
"date": "2019-10-04T08:10:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:14188-1",
"initial_release_date": "2019-10-04T08:10:04Z",
"revision_history": [
{
"date": "2019-10-04T08:10:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"product": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"product_id": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
},
"product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.50-65.42.1.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.50-65.42.1.i586"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-04T08:10:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2336-1
Vulnerability from csaf_suse - Published: 2019-09-09 11:27 - Updated: 2019-09-09 11:27Summary
Security update for java-1_7_1-ibm
Notes
Title of the patch
Security update for java-1_7_1-ibm
Description of the patch
This update for java-1_7_1-ibm fixes the following issues:
Update to Java 7.1 Service Refresh 4 Fix Pack 50.
Security issues fixed:
- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Patchnames
HPE-Helion-OpenStack-8-2019-2336,SUSE-2019-2336,SUSE-OpenStack-Cloud-7-2019-2336,SUSE-OpenStack-Cloud-8-2019-2336,SUSE-OpenStack-Cloud-Crowbar-8-2019-2336,SUSE-SLE-SAP-12-SP1-2019-2336,SUSE-SLE-SAP-12-SP2-2019-2336,SUSE-SLE-SAP-12-SP3-2019-2336,SUSE-SLE-SDK-12-SP4-2019-2336,SUSE-SLE-SDK-12-SP5-2019-2336,SUSE-SLE-SERVER-12-SP1-2019-2336,SUSE-SLE-SERVER-12-SP2-2019-2336,SUSE-SLE-SERVER-12-SP2-BCL-2019-2336,SUSE-SLE-SERVER-12-SP3-2019-2336,SUSE-SLE-SERVER-12-SP3-BCL-2019-2336,SUSE-SLE-SERVER-12-SP4-2019-2336,SUSE-SLE-SERVER-12-SP5-2019-2336,SUSE-Storage-4-2019-2336,SUSE-Storage-5-2019-2336
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_7_1-ibm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_7_1-ibm fixes the following issues:\n\nUpdate to Java 7.1 Service Refresh 4 Fix Pack 50.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "HPE-Helion-OpenStack-8-2019-2336,SUSE-2019-2336,SUSE-OpenStack-Cloud-7-2019-2336,SUSE-OpenStack-Cloud-8-2019-2336,SUSE-OpenStack-Cloud-Crowbar-8-2019-2336,SUSE-SLE-SAP-12-SP1-2019-2336,SUSE-SLE-SAP-12-SP2-2019-2336,SUSE-SLE-SAP-12-SP3-2019-2336,SUSE-SLE-SDK-12-SP4-2019-2336,SUSE-SLE-SDK-12-SP5-2019-2336,SUSE-SLE-SERVER-12-SP1-2019-2336,SUSE-SLE-SERVER-12-SP2-2019-2336,SUSE-SLE-SERVER-12-SP2-BCL-2019-2336,SUSE-SLE-SERVER-12-SP3-2019-2336,SUSE-SLE-SERVER-12-SP3-BCL-2019-2336,SUSE-SLE-SERVER-12-SP4-2019-2336,SUSE-SLE-SERVER-12-SP5-2019-2336,SUSE-Storage-4-2019-2336,SUSE-Storage-5-2019-2336",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2336-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2336-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192336-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2336-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-September/005896.html"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE Bug 1147021",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-4473 page",
"url": "https://www.suse.com/security/cve/CVE-2019-4473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_7_1-ibm",
"tracking": {
"current_release_date": "2019-09-09T11:27:12Z",
"generator": {
"date": "2019-09-09T11:27:12Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2336-1",
"initial_release_date": "2019-09-09T11:27:12Z",
"revision_history": [
{
"date": "2019-09-09T11:27:12Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.i586",
"product": {
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.i586",
"product_id": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.ppc64le",
"product_id": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.ppc64le",
"product": {
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.ppc64le",
"product_id": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390",
"product": {
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390",
"product_id": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390",
"product": {
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390",
"product_id": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390x",
"product": {
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390x",
"product_id": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-32bit-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-demo-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-devel-32bit-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-jdbc-32bit-1.7.1_sr4.50-38.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.x86_64",
"product": {
"name": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.x86_64",
"product_id": "java-1_7_1-ibm-src-1.7.1_sr4.50-38.41.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Helion OpenStack 8",
"product": {
"name": "HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:hpe-helion-openstack:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 7",
"product": {
"name": "SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:7"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 8",
"product": {
"name": "SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-bcl:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 4",
"product": {
"name": "SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 5",
"product": {
"name": "SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of HPE Helion OpenStack 8",
"product_id": "HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "HPE Helion OpenStack 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 7",
"product_id": "SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud 8",
"product_id": "SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
"product_id": "SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 4",
"product_id": "SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
},
"product_reference": "java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11771"
}
],
"notes": [
{
"category": "general",
"text": "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11771",
"url": "https://www.suse.com/security/cve/CVE-2019-11771"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11771",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "important"
}
],
"title": "CVE-2019-11771"
},
{
"cve": "CVE-2019-11775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11775"
}
],
"notes": [
{
"category": "general",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11775",
"url": "https://www.suse.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-11775",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-11775"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-4473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-4473"
}
],
"notes": [
{
"category": "general",
"text": "Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-4473",
"url": "https://www.suse.com/security/cve/CVE-2019-4473"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-4473",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "important"
}
],
"title": "CVE-2019-4473"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"HPE Helion OpenStack 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"HPE Helion OpenStack 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Enterprise Storage 5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP2-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-BCL:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP3-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-devel-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.s390x",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 7:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41.1.x86_64",
"SUSE OpenStack Cloud Crowbar 8:java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-09-09T11:27:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:2036-2
Vulnerability from csaf_suse - Published: 2019-08-01 15:36 - Updated: 2019-08-01 15:36Summary
Security update for java-1_8_0-openjdk
Notes
Title of the patch
Security update for java-1_8_0-openjdk
Description of the patch
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- Certificate validation improvements
Non-security issue fixed:
- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Patchnames
SUSE-2019-2036,SUSE-Storage-5-2019-2036
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- Certificate validation improvements\n\nNon-security issue fixed:\n\n- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-2036,SUSE-Storage-5-2019-2036",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2036-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:2036-2",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192036-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:2036-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-August/005820.html"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-08-01T15:36:09Z",
"generator": {
"date": "2019-08-01T15:36:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:2036-2",
"initial_release_date": "2019-08-01T15:36:09Z",
"revision_history": [
{
"date": "2019-08-01T15:36:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.222-27.35.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-27.35.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Enterprise Storage 5",
"product": {
"name": "SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64 as component of SUSE Enterprise Storage 5",
"product_id": "SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-demo-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-devel-1.8.0.222-27.35.2.x86_64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.aarch64",
"SUSE Enterprise Storage 5:java-1_8_0-openjdk-headless-1.8.0.222-27.35.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-01T15:36:09Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
SUSE-SU-2019:1398-2
Vulnerability from csaf_suse - Published: 2019-07-05 11:03 - Updated: 2019-07-05 11:03Summary
Security update for libpng16
Notes
Title of the patch
Security update for libpng16
Description of the patch
This update for libpng16 fixes the following issues:
Security issues fixed:
- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when
png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2018-13785: Fixed a wrong calculation of row_factor in the
png_check_chunk_length function in pngrutil.c, which could haved triggered
and integer overflow and result in an divide-by-zero while processing a
crafted PNG file, leading to a denial of service (bsc#1100687)
Patchnames
SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-SP1-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1398
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libpng16",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libpng16 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when \n png_image_free() was called under png_safe_execute (bsc#1124211).\n- CVE-2018-13785: Fixed a wrong calculation of row_factor in the\n png_check_chunk_length function in pngrutil.c, which could haved triggered\n and integer overflow and result in an divide-by-zero while processing a\n crafted PNG file, leading to a denial of service (bsc#1100687)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1398,SUSE-SLE-Module-Basesystem-15-SP1-2019-1398,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1398",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1398-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1398-2",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191398-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1398-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-July/005664.html"
},
{
"category": "self",
"summary": "SUSE Bug 1100687",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "self",
"summary": "SUSE Bug 1121624",
"url": "https://bugzilla.suse.com/1121624"
},
{
"category": "self",
"summary": "SUSE Bug 1124211",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-13785 page",
"url": "https://www.suse.com/security/cve/CVE-2018-13785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for libpng16",
"tracking": {
"current_release_date": "2019-07-05T11:03:58Z",
"generator": {
"date": "2019-07-05T11:03:58Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1398-2",
"initial_release_date": "2019-07-05T11:03:58Z",
"revision_history": [
{
"date": "2019-07-05T11:03:58Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-16-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-devel-1.6.34-3.9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.aarch64",
"product_id": "libpng16-tools-1.6.34-3.9.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-16-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-compat-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product": {
"name": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32",
"product_id": "libpng16-devel-64bit-1.6.34-3.9.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.i586",
"product_id": "libpng16-16-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.i586",
"product_id": "libpng16-devel-1.6.34-3.9.1.i586"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.i586",
"product_id": "libpng16-tools-1.6.34-3.9.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-16-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-devel-1.6.34-3.9.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.ppc64le",
"product_id": "libpng16-tools-1.6.34-3.9.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.s390x",
"product_id": "libpng16-16-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x",
"product_id": "libpng16-devel-1.6.34-3.9.1.s390x"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.s390x",
"product_id": "libpng16-tools-1.6.34-3.9.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-16-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-compat-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-devel-32bit-1.6.34-3.9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product": {
"name": "libpng16-tools-1.6.34-3.9.1.x86_64",
"product_id": "libpng16-tools-1.6.34-3.9.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-16-32bit-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-compat-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng16-devel-1.6.34-3.9.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
},
"product_reference": "libpng16-devel-1.6.34-3.9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-13785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-13785"
}
],
"notes": [
{
"category": "general",
"text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-13785",
"url": "https://www.suse.com/security/cve/CVE-2018-13785"
},
{
"category": "external",
"summary": "SUSE Bug 1100687 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1100687"
},
{
"category": "external",
"summary": "SUSE Bug 1112153 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1112153"
},
{
"category": "external",
"summary": "SUSE Bug 1116574 for CVE-2018-13785",
"url": "https://bugzilla.suse.com/1116574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-05T11:03:58Z",
"details": "low"
}
],
"title": "CVE-2018-13785"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-16-32bit-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-compat-devel-1.6.34-3.9.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpng16-devel-1.6.34-3.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-07-05T11:03:58Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
}
]
}
RHSA-2019_1308
Vulnerability from csaf_redhat - Published: 2019-06-03 20:52 - Updated: 2024-11-22 13:19Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 60.7.0.
Security Fix(es):
* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)
* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)
* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)
* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)
* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)
* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)
* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)
* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)
* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)
* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)
* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1308",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1308.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:49+00:00",
"generator": {
"date": "2024-11-22T13:19:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1308",
"initial_release_date": "2019-06-03T20:52:39+00:00",
"revision_history": [
{
"date": "2019-06-03T20:52:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:52:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product_id": "thunderbird-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019_2495
Vulnerability from csaf_redhat - Published: 2019-08-15 09:02 - Updated: 2024-11-15 08:25Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.
Security Fix(es):
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.\n\nSecurity Fix(es):\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2495",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2495.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T08:25:18+00:00",
"generator": {
"date": "2024-11-15T08:25:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:2495",
"initial_release_date": "2019-08-15T09:02:07+00:00",
"revision_history": [
{
"date": "2019-08-15T09:02:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-08-15T09:02:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T08:25:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019_2494
Vulnerability from csaf_redhat - Published: 2019-08-15 09:04 - Updated: 2024-11-15 08:25Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.
Security Fix(es):
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.\n\nSecurity Fix(es):\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2494",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2494.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T08:25:26+00:00",
"generator": {
"date": "2024-11-15T08:25:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:2494",
"initial_release_date": "2019-08-15T09:04:10+00:00",
"revision_history": [
{
"date": "2019-08-15T09:04:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-08-15T09:04:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T08:25:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:04:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:04:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:04:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:04:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:04:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019_1265
Vulnerability from csaf_redhat - Published: 2019-05-23 15:42 - Updated: 2024-11-22 13:19Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 60.7.0 ESR.
Security Fix(es):
* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)
* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)
* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)
* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)
* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)
* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)
* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)
* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)
* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)
* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)
* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)
* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1265",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1265.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:35+00:00",
"generator": {
"date": "2024-11-22T13:19:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1265",
"initial_release_date": "2019-05-23T15:42:35+00:00",
"revision_history": [
{
"date": "2019-05-23T15:42:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:42:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.src",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.src",
"product_id": "firefox-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019_2585
Vulnerability from csaf_redhat - Published: 2019-09-02 07:20 - Updated: 2024-11-15 08:25Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP40.
Security Fix(es):
* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP40.\n\nSecurity Fix(es):\n\n* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2585",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2585.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T08:25:43+00:00",
"generator": {
"date": "2024-11-15T08:25:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:2585",
"initial_release_date": "2019-09-02T07:20:17+00:00",
"revision_history": [
{
"date": "2019-09-02T07:20:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-09-02T07:20:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T08:25:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2786",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730255"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "RHBZ#1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11772",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738547"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Out-of-bounds access in the String.getBytes method",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "RHBZ#1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Out-of-bounds access in the String.getBytes method"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019:2495
Vulnerability from csaf_redhat - Published: 2019-08-15 09:02 - Updated: 2026-01-13 21:32Summary
Red Hat Security Advisory: java-1.7.1-ibm security update
Notes
Topic
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.
Security Fix(es):
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 7 to version 7R1 SR4-FP50.\n\nSecurity Fix(es):\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2495",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2495.json"
}
],
"title": "Red Hat Security Advisory: java-1.7.1-ibm security update",
"tracking": {
"current_release_date": "2026-01-13T21:32:21+00:00",
"generator": {
"date": "2026-01-13T21:32:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2019:2495",
"initial_release_date": "2019-08-15T09:02:07+00:00",
"revision_history": [
{
"date": "2019-08-15T09:02:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-08-15T09:02:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T21:32:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-plugin@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-demo@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-devel@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-jdbc@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_id": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.7.1-ibm-src@1.7.1.4.50-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-08-15T09:02:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.4.50-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.4.50-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019:2737
Vulnerability from csaf_redhat - Published: 2019-09-11 15:15 - Updated: 2026-01-13 22:33Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP40.
Security Fix(es):
* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP40.\n\nSecurity Fix(es):\n\n* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2737",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2737.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2026-01-13T22:33:23+00:00",
"generator": {
"date": "2026-01-13T22:33:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2019:2737",
"initial_release_date": "2019-09-11T15:15:17+00:00",
"revision_history": [
{
"date": "2019-09-11T15:15:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-09-11T15:15:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:33:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.8::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2786",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730255"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "RHBZ#1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11772",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738547"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Out-of-bounds access in the String.getBytes method",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "RHBZ#1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Out-of-bounds access in the String.getBytes method"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-11T15:15:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019:2592
Vulnerability from csaf_redhat - Published: 2019-09-03 00:27 - Updated: 2026-01-13 21:32Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP40.
Security Fix(es):
* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP40.\n\nSecurity Fix(es):\n\n* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2592",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2592.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2026-01-13T21:32:23+00:00",
"generator": {
"date": "2026-01-13T21:32:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2019:2592",
"initial_release_date": "2019-09-03T00:27:15+00:00",
"revision_history": [
{
"date": "2019-09-03T00:27:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-09-03T00:27:15+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T21:32:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2786",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730255"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "RHBZ#1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11772",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738547"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Out-of-bounds access in the String.getBytes method",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "RHBZ#1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Out-of-bounds access in the String.getBytes method"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-03T00:27:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Failure to privatize a value pulled out of the loop by versioning"
}
]
}
RHSA-2019:1269
Vulnerability from csaf_redhat - Published: 2019-05-23 16:08 - Updated: 2026-01-13 22:40Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 60.7.0 ESR.
Security Fix(es):
* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)
* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)
* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)
* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)
* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)
* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)
* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)
* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)
* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)
* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)
* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)
* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1269",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1269.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2026-01-13T22:40:04+00:00",
"generator": {
"date": "2026-01-13T22:40:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2019:1269",
"initial_release_date": "2019-05-23T16:08:37+00:00",
"revision_history": [
{
"date": "2019-05-23T16:08:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T16:08:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:40:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.src",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.src",
"product_id": "firefox-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:2585
Vulnerability from csaf_redhat - Published: 2019-09-02 07:20 - Updated: 2026-01-13 22:35Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP40.
Security Fix(es):
* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)
* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)
* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)
* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)
* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)
* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP40.\n\nSecurity Fix(es):\n\n* IBM JDK: Out-of-bounds access in the String.getBytes method (CVE-2019-11772)\n\n* IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775)\n\n* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)\n\n* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)\n\n* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)\n\n* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:2585",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2585.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2026-01-13T22:35:41+00:00",
"generator": {
"date": "2026-01-13T22:35:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2019:2585",
"initial_release_date": "2019-09-02T07:20:17+00:00",
"revision_history": [
{
"date": "2019-09-02T07:20:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-09-02T07:20:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:35:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.40-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.7.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.7.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2762",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730415"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "RHBZ#1730415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2762"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)"
},
{
"cve": "CVE-2019-2769",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730056"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "RHBZ#1730056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)"
},
{
"cve": "CVE-2019-2786",
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730255"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "RHBZ#1730255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2786"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)"
},
{
"cve": "CVE-2019-2816",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2019-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1730099"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: Missing URL format validation (Networking, 8221518)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "RHBZ#1730099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2816"
}
],
"release_date": "2019-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: Missing URL format validation (Networking, 8221518)"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"cve": "CVE-2019-11772",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738547"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Out-of-bounds access in the String.getBytes method",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11772"
},
{
"category": "external",
"summary": "RHBZ#1738547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11772"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: Out-of-bounds access in the String.getBytes method"
},
{
"cve": "CVE-2019-11775",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2019-08-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1738549"
}
],
"notes": [
{
"category": "description",
"text": "All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop. This can lead to a variety of different issues but read out of array bounds is one major consequence of these problems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: Failure to privatize a value pulled out of the loop by versioning",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11775"
},
{
"category": "external",
"summary": "RHBZ#1738549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11775"
}
],
"release_date": "2019-08-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-09-02T07:20:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Client-7.7.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7ComputeNode-7.7.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Server-7.7.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.40-1jpp.1.el7.x86_64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.ppc64le",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.s390x",
"7Workstation-7.7.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.40-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title