Every CVE Search/ Get API key

CVE-2016-9842

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...

8.8 HighFix available

CVE-2016-9842 is a high vulnerability (CVSS 8.8) in Zlib, published December 21, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.20%, the 92nd percentile. Fixed in perl 5.24.3-r1.

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

5.20%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-1335
Updated
2026-11-02
CVE List 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-1335
Updated
2026-11-02
EUVDEUVD-2016-10642 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
EUVD-2016-10642
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3686-jjcf-4w27 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
GHSA-3686-jjcf-4w27
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-1335
Updated
2026-11-02
OSVALPINE-CVE-2016-9842 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
ALPINE-CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-44631 8.8

CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
AZL-44631
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 31 moreShow less
OSVAZL-45183 8.8

CVE-2016-9842 affecting package openjpeg2 2.3.1-12

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
AZL-45183
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2016-9842 8.8

CVE-2016-9842 does not affect BellSoft software

Record
BELL-CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-9842 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
DEBIAN-CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1433 9.8

syslinux security update

Security Fix(es):

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.(CVE-2016-9840)

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.(CVE-2016-9842)

CVE-2016-9840:inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. CVE-2016-9841:inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. CVE-2016-9842:The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers. CVE-2016-9843:The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.(CVE-2016-9843)

Record
OESA-2023-1433
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:1220 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2017:1220
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:1221 9.8

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2017:1221
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:1222 9.8

Red Hat Security Advisory: java-1.6.0-ibm security update

Record
RHSA-2017:1222
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2999 9.8

Red Hat Security Advisory: java-1.8.0-oracle security update

Record
RHSA-2017:2999
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:3046 9.8

Red Hat Security Advisory: java-1.7.0-oracle security update

Record
RHSA-2017:3046
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:3047 9.8

Red Hat Security Advisory: java-1.6.0-sun security update

Record
RHSA-2017:3047
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:3453 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2017:3453
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-9842 8.8

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
UBUNTU-CVE-2016-9842
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0108 No score

Updated rsync packages fix security vulnerabilities

Updated rsync packages fix security vulnerabilities:

It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9840, CVE-2016-9841)

It was discovered that rsync incorrectly handled vectors involving left shifts of negative integers in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9842).

It was discovered that rsync incorrectly handled vectors involving big- endian CRC calculation in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9843).

Please note, we now compile against system zlib. If rsync fails to sync with older remote systems using compression (-z), you have either update the remote host to a newer version or disable compression.

Record
MGASA-2020-0108
Updated
2026-11-02
OSVPSF-2017-4 No score

Zlib 1.2.11

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Record
PSF-2017-4
Updated
2026-11-02
OSVSUSE-SU-2016:3209-1 No score

Security update for zlib

This update for zlib fixes the following issues:

  • Incompatible declarations for external linkage function deflate (bnc#1003577)
  • CVE-2016-9842: Undefined Left Shift of Negative Number (bnc#1003580)
  • CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bnc#1003579)
  • CVE-2016-9843: Big-endian out-of-bounds pointer
Record
SUSE-SU-2016:3209-1
Updated
2026-11-02
OSVSUSE-SU-2017:0003-1 No score

Security update for zlib

This update for zlib fixes the following issues:

CVE-2016-9843: Big-endian out-of-bounds pointer

CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580)

CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)

Incompatible declarations for external linkage function deflate (bsc#1003577)

Record
SUSE-SU-2017:0003-1
Updated
2026-11-02
OSVSUSE-SU-2017:0004-1 No score

Security update for zlib

This update for zlib fixes the following issues:

CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580)

CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)

Incompatible declarations for external linkage function deflate (bsc#1003577)

Record
SUSE-SU-2017:0004-1
Updated
2026-11-02
OSVSUSE-SU-2017:1384-1 No score

Security update for java-1_7_0-ibm

This update for java-1_7_0-ibm fixes the following issues:

Version update to 7.0-10.5 bsc#1038505

  • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
  • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
  • CVE-2016-9842: zlib: Undefined left shift of negative number
  • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
  • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
  • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
  • CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
  • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
  • CVE-2017-3533: OpenJDK: newline injection in the FTP client
  • CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Record
SUSE-SU-2017:1384-1
Updated
2026-11-02
OSVSUSE-SU-2017:1385-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Version update to 7.1-4.5 bsc#1038505

    • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
    • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
    • CVE-2016-9842: zlib: Undefined left shift of negative number
    • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
    • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
    • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
    • CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
    • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
    • CVE-2017-3533: OpenJDK: newline injection in the FTP client
    • CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Record
SUSE-SU-2017:1385-1
Updated
2026-11-02
OSVSUSE-SU-2017:1386-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Version update bsc#1038505:

  • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
  • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
  • CVE-2016-9842: zlib: Undefined left shift of negative number
  • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
  • CVE-2017-3544: OpenJDK: newline injection in the SMTP client
  • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
  • CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
  • CVE-2017-3533: OpenJDK: newline injection in the FTP client
  • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
  • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
Record
SUSE-SU-2017:1386-1
Updated
2026-11-02
OSVSUSE-SU-2017:1387-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Version update to 7.1-4.5 bsc#1038505

  • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
  • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
  • CVE-2016-9842: zlib: Undefined left shift of negative number
  • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
  • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
  • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
  • CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher
  • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
  • CVE-2017-3533: OpenJDK: newline injection in the FTP client
  • CVE-2017-3544: OpenJDK: newline injection in the SMTP client
Record
SUSE-SU-2017:1387-1
Updated
2026-11-02
OSVSUSE-SU-2017:1389-1 No score

Security update for java-1_6_0-ibm

This update for java-1_6_0-ibm fixes the following issues:

  • Version update to 6.0-16.45 bsc#1038505

    • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c
    • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c
    • CVE-2016-9842: zlib: Undefined left shift of negative number
    • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
    • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data
    • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections
    • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification
    • CVE-2017-3533: OpenJDK: newline injection in the FTP client
    • CVE-2017-3544: OpenJDK: newline injection in the SMTP client

  • Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183

Record
SUSE-SU-2017:1389-1
Updated
2026-11-02
OSVSUSE-SU-2017:1444-1 No score

Security update for java-1_6_0-ibm

This update for java-1_6_0-ibm fixes the following issues:

  • CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c

  • CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c

  • CVE-2016-9842: zlib: Undefined left shift of negative number

  • CVE-2016-9843: zlib: Big-endian out-of-bounds pointer

  • CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data

  • CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections

  • CVE-2017-3539: OpenJDK: MD5 allowed for jar verification

  • CVE-2017-3533: OpenJDK: newline injection in the FTP client

  • CVE-2017-3544: OpenJDK: newline injection in the SMTP client

  • Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183

Record
SUSE-SU-2017:1444-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02
OSVSUSE-SU-2017:2989-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk fixes the following issues:

  • Update to version jdk8u151 (icedtea 3.6.0)

Security issues fixed:

  • CVE-2017-10274: Handle smartcard clean up better (bsc#1064071)
  • CVE-2017-10281: Better queuing priorities (bsc#1064072)
  • CVE-2017-10285: Unreferenced references (bsc#1064073)
  • CVE-2017-10295: Better URL connections (bsc#1064075)
  • CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086)
  • CVE-2017-10346: Better invokespecial checks (bsc#1064078)
  • CVE-2017-10350: Better Base Exceptions (bsc#1064082)
  • CVE-2017-10347: Better timezone processing (bsc#1064079)
  • CVE-2017-10349: Better X processing (bsc#1064081)
  • CVE-2017-10345: Better keystore handling (bsc#1064077)
  • CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080)
  • CVE-2017-10357: Process Proxy presentation (bsc#1064085)
  • CVE-2017-10355: More stable connection processing (bsc#1064083)
  • CVE-2017-10356: Update storage implementations (bsc#1064084)
  • CVE-2016-10165: Improve CMS header processing (bsc#1064069)
  • CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade compression library (bsc#1064070)

Bug fixes:

  • Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs
Record
SUSE-SU-2017:2989-1
Updated
2026-11-02
OSVSUSE-SU-2018:0005-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk fixes the following issues:

Security issues fixed:

  • CVE-2017-10356: Fix issue inside subcomponent Security (bsc#1064084).
  • CVE-2017-10274: Fix issue inside subcomponent Smart Card IO (bsc#1064071).
  • CVE-2017-10281: Fix issue inside subcomponent Serialization (bsc#1064072).
  • CVE-2017-10285: Fix issue inside subcomponent RMI (bsc#1064073).
  • CVE-2017-10295: Fix issue inside subcomponent Networking (bsc#1064075).
  • CVE-2017-10388: Fix issue inside subcomponent Libraries (bsc#1064086).
  • CVE-2017-10346: Fix issue inside subcomponent Hotspot (bsc#1064078).
  • CVE-2017-10350: Fix issue inside subcomponent JAX-WS (bsc#1064082).
  • CVE-2017-10347: Fix issue inside subcomponent Serialization (bsc#1064079).
  • CVE-2017-10349: Fix issue inside subcomponent JAXP (bsc#1064081).
  • CVE-2017-10345: Fix issue inside subcomponent Serialization (bsc#1064077).
  • CVE-2017-10348: Fix issue inside subcomponent Libraries (bsc#1064080).
  • CVE-2017-10357: Fix issue inside subcomponent Serialization (bsc#1064085).
  • CVE-2017-10355: Fix issue inside subcomponent Networking (bsc#1064083).
  • CVE-2017-10102: Fix incorrect handling of references in DGC (bsc#1049316).
  • CVE-2017-10053: Fix reading of unprocessed image data in JPEGImageReader (bsc#1049305).
  • CVE-2017-10067: Fix JAR verifier incorrect handling of missing digest (bsc#1049306).
  • CVE-2017-10081: Fix incorrect bracket processing in function signature handling (bsc#1049309).
  • CVE-2017-10087: Fix insufficient access control checks in ThreadPoolExecutor (bsc#1049311).
  • CVE-2017-10089: Fix insufficient access control checks in ServiceRegistry (bsc#1049312).
  • CVE-2017-10090: Fix insufficient access control checks in AsynchronousChannelGroupImpl (bsc#1049313).
  • CVE-2017-10096: Fix insufficient access control checks in XML transformations (bsc#1049314).
  • CVE-2017-10101: Fix unrestricted access to com.sun.org.apache.xml.internal.resolver (bsc#1049315).
  • CVE-2017-10107: Fix insufficient access control checks in ActivationID (bsc#1049318).
  • CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).
  • CVE-2017-10110: Fix insufficient access control checks in ImageWatched (bsc#1049321).
  • CVE-2017-10108: Fix unbounded memory allocation in BasicAttribute deserialization (bsc#1049319).
  • CVE-2017-10109: Fix unbounded memory allocation in CodeSource deserialization (bsc#1049320).
  • CVE-2017-10115: Fix unspecified vulnerability in subcomponent JCE (bsc#1049324).
  • CVE-2017-10118: Fix ECDSA implementation timing attack (bsc#1049326).
  • CVE-2017-10116: Fix LDAPCertStore following referrals to non-LDAP URL (bsc#1049325).
  • CVE-2017-10135: Fix PKCS#8 implementation timing attack (bsc#1049328).
  • CVE-2017-10176: Fix incorrect handling of certain EC points (bsc#1049329).
  • CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).
  • CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).
  • CVE-2017-10111: Fix checks in LambdaFormEditor (bsc#1049322).
  • CVE-2017-10243: Fix unspecified vulnerability in subcomponent JAX-WS (bsc#1049332).
  • CVE-2017-10125: Fix unspecified vulnerability in subcomponent deployment (bsc#1049327).
  • CVE-2017-10114: Fix unspecified vulnerability in subcomponent JavaFX (bsc#1049323).
  • CVE-2017-10105: Fix unspecified vulnerability in subcomponent deployment (bsc#1049317).
  • CVE-2017-10086: Fix unspecified in subcomponent JavaFX (bsc#1049310).
  • CVE-2017-10198: Fix incorrect enforcement of certificate path restrictions (bsc#1049331).
  • CVE-2017-10193: Fix incorrect key size constraint check (bsc#1049330).

Bug fixes:

  • Drop Exec Shield workaround to fix crashes on recent kernels, where Exec Shield is gone (bsc#1052318).
Record
SUSE-SU-2018:0005-1
Updated
2026-11-02
OSVSUSE-SU-2018:1815-1 No score

Security update for zlib

This update brings zlib to 1.2.7, bringing bugfixes and speedups.

It also reduces a buildtime issue with clamav 0.100 which caused hangs on 32bit platforms. (bsc#1095016)

Record
SUSE-SU-2018:1815-1
Updated
2026-11-02
OSVUSN-4246-1 No score

zlib vulnerabilities

It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841)

It was discovered that zlib incorrectly handled vectors involving left shifts of negative integers. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9842)

It was discovered that zlib incorrectly handled vectors involving big-endian CRC calculation. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9843)

Record
USN-4246-1
Updated
2026-11-02
OSVUSN-4292-1 No score

rsync vulnerabilities

It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841)

It was discovered that rsync incorrectly handled vectors involving left shifts of negative integers in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9842)

It was discovered that rsync incorrectly handled vectors involving big-endian CRC calculation in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9843)

Record
USN-4292-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
perl
Alpine:v3.5
 before 5.24.3-r1
5.24.3-r1
perl
Alpine:v3.6
 before 5.24.3-r1
5.24.3-r1
zlib
Alpine:v3.3
 1.2.3.4 up to 1.2.11-r0
1.2.11-r0
zlib
Alpine:v3.4
 1.2.3.4 up to 1.2.11-r0
1.2.11-r0
zlib
Alpine:v3.5
 1.2.3.4 up to 1.2.11-r0
1.2.11-r0
fltk
Azure Linux:3
 before 1.3.8-1
1.3.8-1
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
rsync
Debian:12
 before 3.1.3-6
3.1.3-6
rsync
Debian:13
 before 3.1.3-6
3.1.3-6
rsync
Debian:14
 before 3.1.3-6
3.1.3-6
Show 152 moreShow less
Affected packages
PackageAffectedFixed
zlib
Debian:12
 before 1:1.2.8.dfsg-3
1:1.2.8.dfsg-3
zlib
Debian:13
 before 1:1.2.8.dfsg-3
1:1.2.8.dfsg-3
zlib
Debian:14
 before 1:1.2.8.dfsg-3
1:1.2.8.dfsg-3
rsync
Debian:8
 before 3.1.1-3+deb8u2, plus listed versions
3.1.1-33.1.1-3+deb8u1
3.1.1-3+deb8u2
zlib
Debian:8
 before 1:1.2.8.dfsg-2+deb8u1, plus listed versions
1:1.2.8.dfsg-2
1:1.2.8.dfsg-2+deb8u1
rsync
Mageia:7
 before 3.1.3-4.mga7
3.1.3-4.mga7
syslinux
openEuler:20.03-LTS-SP1
 before 6.04-12.oe1
6.04-12.oe1
syslinux
openEuler:20.03-LTS-SP3
 before 6.04-12.oe1
6.04-12.oe1
syslinux
openEuler:22.03-LTS
 before 6.04-14.oe2203sp2
6.04-14.oe2203sp2
syslinux
openEuler:22.03-LTS-SP1
 before 6.04-14.oe2203sp1
6.04-14.oe2203sp1
syslinux
openEuler:22.03-LTS-SP2
 before 6.04-14.oe2203sp2
6.04-14.oe2203sp2
java-1.8.0-ibm
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.8.0.4.5-1jpp.1.el6_9
1:1.8.0.4.5-1jpp.1.el6_9
java-1.8.0-ibm
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.8.0-ibm-demo
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.8.0-ibm-devel
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.8.0-ibm-src
Red Hat:rhel_extras:7
 before 1:1.8.0.4.5-1jpp.1.el7_3
1:1.8.0.4.5-1jpp.1.el7_3
java-1.7.1-ibm
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.1.4.5-1jpp.2.el6_9
1:1.7.1.4.5-1jpp.2.el6_9
java-1.7.1-ibm
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
 before 1:1.7.1.4.5-1jpp.1.el7_3
1:1.7.1.4.5-1jpp.1.el7_3
java-1.6.0-ibm
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.6.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.6.0.16.45-1jpp.1.el6_9
1:1.6.0.16.45-1jpp.1.el6_9
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
 before 1:1.8.0.151-1jpp.1.el6
1:1.8.0.151-1jpp.1.el6
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:7
 before 1:1.8.0.151-1jpp.5.el7
1:1.8.0.151-1jpp.5.el7
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
 before 1:1.7.0.161-1jpp.3.el6
1:1.7.0.161-1jpp.3.el6
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:7
 before 1:1.7.0.161-1jpp.4.el7
1:1.7.0.161-1jpp.4.el7
java-1.6.0-sun
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun-demo
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun-devel
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun-jdbc
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun-plugin
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun-src
Red Hat:rhel_extras_oracle_java:6
 before 1:1.6.0.171-1jpp.4.el6
1:1.6.0.171-1jpp.4.el6
java-1.6.0-sun
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.6.0-sun-demo
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.6.0-sun-devel
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.6.0-sun-jdbc
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.6.0-sun-plugin
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.6.0-sun-src
Red Hat:rhel_extras_oracle_java:7
 before 1:1.6.0.171-1jpp.4.el7
1:1.6.0.171-1jpp.4.el7
java-1.8.0-ibm
Red Hat:network_satellite:5.8::el6
 before 1:1.8.0.5.5-1jpp.1.el6_9
1:1.8.0.5.5-1jpp.1.el6_9
java-1.8.0-ibm-devel
Red Hat:network_satellite:5.8::el6
 before 1:1.8.0.5.5-1jpp.1.el6_9
1:1.8.0.5.5-1jpp.1.el6_9
zlib
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.2.7-0.14.1
1.2.7-0.14.1
zlib
SUSE:Linux Enterprise Server 11 SP4
 before 1.2.7-0.14.1
1.2.7-0.14.1
zlib
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.2.7-0.14.1
1.2.7-0.14.1
zlib
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.2.8-11.1
1.2.8-11.1
zlib
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.2.8-11.1
1.2.8-11.1
zlib
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.2.8-11.1
1.2.8-11.1
zlib
SUSE:Linux Enterprise Server 12 SP2
 before 1.2.8-11.1
1.2.8-11.1
zlib
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.2.8-11.1
1.2.8-11.1
zlib
SUSE:Linux Enterprise Desktop 12 SP1
 before 1.2.8-6.3.1
1.2.8-6.3.1
zlib
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 1.2.8-6.3.1
1.2.8-6.3.1
zlib
SUSE:Linux Enterprise Server 12 SP1
 before 1.2.8-6.3.1
1.2.8-6.3.1
zlib
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.2.8-6.3.1
1.2.8-6.3.1
java-1_7_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 1.7.0_sr10.5-64.1
1.7.0_sr10.5-64.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 1.7.0_sr10.5-64.1
1.7.0_sr10.5-64.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 1.7.0_sr10.5-64.1
1.7.0_sr10.5-64.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12-LTSS
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP1
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.7.1_sr4.5-37.1
1.7.1_sr4.5-37.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP1
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.0_sr4.5-29.1
1.8.0_sr4.5-29.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.7.1_sr4.5-25.1
1.7.1_sr4.5-25.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4
 before 1.7.1_sr4.5-25.1
1.7.1_sr4.5-25.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.7.1_sr4.5-25.1
1.7.1_sr4.5-25.1
java-1_6_0-ibm
SUSE:Linux Enterprise Module for Legacy 12
 before 1.6.0_sr16.45-49.1
1.6.0_sr16.45-49.1
java-1_6_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 1.6.0_sr16.45-84.1
1.6.0_sr16.45-84.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 1.6.0_sr16.45-84.1
1.6.0_sr16.45-84.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 1.6.0_sr16.45-84.1
1.6.0_sr16.45-84.1
java-1_8_0-openjdk
SUSE:OpenStack Cloud 6
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP3
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.0.151-27.8.1
1.8.0.151-27.8.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 6
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP3
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12-LTSS
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.7.0.161-43.7.6
1.7.0.161-43.7.6
zlib
SUSE:Studio Onsite 1.3
 before 1.2.7-0.135.3.1
1.2.7-0.135.3.1
zlib
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:1.2.8.dfsg-1ubuntu11:1.2.8.dfsg-1ubuntu1.11:1.2.8.dfsg-1ubuntu1.1+esm11:1.2.8.dfsg-1ubuntu1.1+esm21:1.2.8.dfsg-1ubuntu1.1+esm3
 None known
rsync
Ubuntu:16.04:LTS
 before 3.1.1-3ubuntu1.3, plus listed versions
3.1.1-33.1.1-3ubuntu13.1.1-3ubuntu1.13.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3
zlib
Ubuntu:16.04:LTS
 before 1:1.2.8.dfsg-2ubuntu4.3, plus listed versions
1:1.2.8.dfsg-2ubuntu41:1.2.8.dfsg-2ubuntu4.1
1:1.2.8.dfsg-2ubuntu4.3
zsync
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.6.2-1ubuntu1
 None known
rsync
Ubuntu:18.04:LTS
 before 3.1.2-2.1ubuntu1.1, plus listed versions
3.1.2-23.1.2-2.13.1.2-2.1ubuntu1
3.1.2-2.1ubuntu1.1
zsync
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.6.2-2ubuntu10.6.2-3ubuntu1
 None known
rsync
Ubuntu:20.04:LTS
 before 3.1.3-6
3.1.3-6
zsync
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.6.2-3ubuntu1
 None known
zsync
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.6.2-3ubuntu1
 None known
zsync
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.6.2-50.6.2-5build1
 None known
zsync
Ubuntu:25.10
 All versions, plus listed versions
0.6.2-7ubuntu10.6.2-8
 None known
zsync
Ubuntu:26.10
 All versions, plus listed versions
0.6.2-90.6.3-2
 None known
zsync
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.6.2-80.6.2-9
 None known

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 301 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open