Every CVE Search/ Get API key

CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos)....

6.8 MediumFix available

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

3.59%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
CVE-2019-2949
Updated
2026-11-02
EUVDEUVD-2019-12588 No score

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
EUVD-2019-12588
Updated
2026-11-03
GitHub AdvisoriesGHSA-522c-xxvj-5jhw 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos)....

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
GHSA-522c-xxvj-5jhw
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2019-2949 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
ALPINE-CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-03
OSVBELL-CVE-2019-2949 6.8

CVE-2019-2949 does not affect BellSoft software

Record
BELL-CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
Show 26 moreShow less
OSV 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-2949 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
DEBIAN-CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3127 6.8

Red Hat Security Advisory: java-11-openjdk security update

Record
RHSA-2019:3127
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3128 6.8

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record
RHSA-2019:3128
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3134 6.8

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record
RHSA-2019:3134
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3135 6.8

Red Hat Security Advisory: java-11-openjdk security update

Record
RHSA-2019:3135
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3136 6.8

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record
RHSA-2019:3136
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:2237 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2020:2237
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2239 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2020:2239
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2241 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2020:2241
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-2949 6.8

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).

Record
UBUNTU-CVE-2019-2949
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2019-0302 No score

Updated java-1.8.0-openjdk packages fix security vulnerabilities

The updated packages fix several bugs and some security issues:

Missing restrictions on use of custom SocketImpl (Networking, 8218573). (CVE-2019-2945)

Improper handling of Kerberos proxy credentials (Kerberos, 8220302). (CVE-2019-2949)

NULL pointer dereference in DrawGlyphList (2D, 8222690). (CVE-2019-2962)

Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684). (CVE-2019-2964)

Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505). (CVE-2019-2973)

Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518). (CVE-2019-2975)

Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892). (CVE-2019-2978)

Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532). (CVE-2019-2981)

Unexpected exception thrown during Font object deserialization (Serialization, 8224915). (CVE-2019-2983)

Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286). (CVE-2019-2987)

Integer overflow in bounds check in SunGraphics2D (2D, 8225292). (CVE-2019-2988)

Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298). (CVE-2019-2989)

Excessive memory allocation in CMap when reading TrueType font (2D, 8225597). (CVE-2019-2992)

Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765). (CVE-2019-2999)

Record
MGASA-2019-0302
Updated
2026-11-02
OSVopenSUSE-SU-2019:2557-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2557-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2565-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2565-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2687-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:

Security issues fixed (bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Fixed build failuers on ARM (bsc#1138529).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2687-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score

java-11-openjdk-11.0.12.0-3.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10871-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score

java-13-openjdk-13.0.8.0-3.1 on GA media

These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10872-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10876-1 No score

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10876-1
Updated
2026-11-02
OSVSUSE-SU-2019:2998-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:2998-1
Updated
2026-11-02
OSVSUSE-SU-2019:3083-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:3083-1
Updated
2026-11-02
OSVSUSE-SU-2019:3084-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:3084-1
Updated
2026-11-02
OSVSUSE-SU-2019:3238-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:

Security issues fixed (bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Fixed build failuers on ARM (bsc#1138529).
Record
SUSE-SU-2019:3238-1
Updated
2026-11-02
OSVSUSE-SU-2020:0025-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU, bsc#1154212)

Security issues fixed:

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Add patch to fix hotspot-aarch64 (bsc#1138529).
Record
SUSE-SU-2020:0025-1
Updated
2026-11-02
OSVSUSE-SU-2020:1684-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

java-1_8_0-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1172277,bsc#1169511,bsc#1160968)

  • CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial denial of service
  • CVE-2020-2754: Forwarded references to Nashorn
  • CVE-2020-2755: Improved Nashorn matching
  • CVE-2020-2756: Improved mapping of serial ENUMs
  • CVE-2020-2757: Less Blocking Array Queues
  • CVE-2020-2781: Improved TLS session handling
  • CVE-2020-2800: Improved Headings for HTTP Servers
  • CVE-2020-2803: Enhanced buffering of byte buffers
  • CVE-2020-2805: Enhanced typing of methods
  • CVE-2020-2830: Improved Scanner conversions
  • CVE-2019-2949: Fixed an issue which could have resulted in unauthorized access to critical data
  • Added RSA PSS SUPPORT TO IBMPKCS11IMPL
  • The pack200 and unpack200 alternatives should be slaves of java (bsc#1171352).
Record
SUSE-SU-2020:1684-1
Updated
2026-11-02
OSVSUSE-SU-2020:1685-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

java-1_8_0-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1172277,bsc#1169511,bsc#1160968)

  • CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial denial of service
  • CVE-2020-2754: Forwarded references to Nashorn
  • CVE-2020-2755: Improved Nashorn matching
  • CVE-2020-2756: Improved mapping of serial ENUMs
  • CVE-2020-2757: Less Blocking Array Queues
  • CVE-2020-2781: Improved TLS session handling
  • CVE-2020-2800: Improved Headings for HTTP Servers
  • CVE-2020-2803: Enhanced buffering of byte buffers
  • CVE-2020-2805: Enhanced typing of methods
  • CVE-2020-2830: Improved Scanner conversions
  • CVE-2019-2949: Fixed an issue which could have resulted in unauthorized access to critical data
  • Added RSA PSS SUPPORT TO IBMPKCS11IMPL
  • The pack200 and unpack200 alternatives should be slaves of java (bsc#1171352).
Record
SUSE-SU-2020:1685-1
Updated
2026-11-02
OSVUSN-4223-1 No score

openjdk-8, openjdk-lts vulnerabilities

Jan Jancar, Petr Svenda, and Vladimir Sedlacek discovered that a side- channel vulnerability existed in the ECDSA implementation in OpenJDK. An Attacker could use this to expose sensitive information. (CVE-2019-2894)

It was discovered that the Socket implementation in OpenJDK did not properly restrict the creation of subclasses with a custom Socket implementation. An attacker could use this to specially create a Java class that could possibly bypass Java sandbox restrictions. (CVE-2019-2945)

Rob Hamm discovered that the Kerberos implementation in OpenJDK did not properly handle proxy credentials. An attacker could possibly use this to impersonate another user. (CVE-2019-2949)

It was discovered that a NULL pointer dereference existed in the font handling implementation in OpenJDK. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2962)

It was discovered that the Concurrency subsystem in OpenJDK did not properly bound stack consumption when compiling regular expressions. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2964)

It was discovered that the JAXP subsystem in OpenJDK did not properly handle XPath expressions in some situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2973, CVE-2019-2981)

It was discovered that the Nashorn JavaScript subcomponent in OpenJDK did not properly handle regular expressions in some situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2975)

It was discovered that the String class in OpenJDK contained an out-of- bounds access vulnerability. An attacker could use this to cause a denial of service (application crash) or possibly expose sensitive information. This issue only affected OpenJDK 11 in Ubuntu 18.04 LTS, Ubuntu 19.04, and Ubuntu 19.10. (CVE-2019-2977)

It was discovered that the Jar URL handler in OpenJDK did not properly handled nested Jar URLs in some situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2978)

It was discovered that the Serialization component of OpenJDK did not properly handle deserialization of certain object attributes. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2983)

It was discovered that the FreetypeFontScaler class in OpenJDK did not properly validate dimensions of glyph bitmap images read from font files. An attacker could specially craft a font file that could cause a denial of service (application crash). (CVE-2019-2987)

It was discovered that a buffer overflow existed in the SunGraphics2D class in OpenJDK. An attacker could possibly use this to cause a denial of service (excessive memory consumption or application crash). (CVE-2019-2988)

It was discovered that the Networking component in OpenJDK did not properly handle certain responses from HTTP proxies. An attacker controlling a malicious HTTP proxy could possibly use this to inject content into a proxied HTTP connection. (CVE-2019-2989)

It was discovered that the font handling implementation in OpenJDK did not properly validate TrueType font files in some situations. An attacker could specially craft a font file that could cause a denial of service (excessive memory consumption). (CVE-2019-2992)

It was discovered that the JavaDoc generator in OpenJDK did not properly filter out some HTML elements properly, including documentation comments in Java source code. An attacker could possibly use this to craft a Cross-Site Scripting attack. (CVE-2019-2999)

Record
USN-4223-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
openjdk11
Alpine:v3.15
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.16
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.17
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.18
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.19
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.20
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.21
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.22
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.23
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.24
 before 11.0.5_p10-r0
11.0.5_p10-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
openjdk7
Alpine:v3.10
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.11
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.12
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.13
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.14
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.15
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.16
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.17
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.18
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.9
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk8
Alpine:v3.10
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.11
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.12
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.13
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.14
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.15
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.16
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.17
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.18
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.19
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.20
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.21
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.22
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.23
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.24
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.7
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.8
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.9
 before 8.232.09-r0
8.232.09-r0
openjdk-11
Debian:11
 before 11.0.5+10-1
11.0.5+10-1
openjdk-7
Debian:8
From an advisory covering 16 CVEs
 before 7u241-2.6.20-1~deb8u1, plus listed versions
7u101-2.6.6-17u101-2.6.6-1~deb8u17u101-2.6.6-27u101-2.6.6-2~deb7u17u101-2.6.6-2~deb8u1
Show 45 moreShow less
7u111-2.6.7-17u111-2.6.7-1~deb7u17u111-2.6.7-1~deb8u17u111-2.6.7-27u111-2.6.7-2~deb7u17u111-2.6.7-2~deb8u17u111-2.6.7-37u121-2.6.8-17u121-2.6.8-1~deb7u17u121-2.6.8-27u121-2.6.8-2~deb7u17u121-2.6.8-2~deb8u17u131-2.6.9-17u131-2.6.9-27u131-2.6.9-2~deb7u17u131-2.6.9-2~deb8u17u131-2.6.9-37u151-2.6.11-17u151-2.6.11-1~deb8u17u151-2.6.11-27u151-2.6.11-2~deb7u27u151-2.6.11-2~deb7u37u151-2.6.11-2~deb8u17u151-2.6.11-37u161-2.6.12-17u171-2.6.13-17u171-2.6.13-1~deb7u17u171-2.6.13-1~deb8u17u181-2.6.14-17u181-2.6.14-1~deb8u17u181-2.6.14-27u181-2.6.14-2~deb8u17u211-2.6.17-17u211-2.6.17-1~deb8u17u221-2.6.18-1~deb8u17u231-2.6.19-1~deb8u17u231-2.6.19-1~deb8u27u75-2.5.4-27u75-2.5.4-37u79-2.5.5-17u79-2.5.5-1~deb7u17u79-2.5.5-1~deb8u17u79-2.5.6-17u79-2.5.6-1~deb7u17u79-2.5.6-1~deb8u1
7u241-2.6.20-1~deb8u1
openjdk-11
Debian:10
From an advisory covering 16 CVEs
 before 11.0.5+10-1~deb10u1, plus listed versions
11.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-111.0.4+11-1~bpo9+1
Show 12 moreShow less
11.0.4+11-1~deb10u111.0.4+2-111.0.4+4+really11.0.3+7-111.0.4+4+really11.0.3+7-211.0.4+4-111.0.4+6-111.0.4+8-111.0.4+9-111.0.5+10-1~bpo9+111.0.5+6-111.0.5+6-211.0.5+9-1
11.0.5+10-1~deb10u1
openjdk-8
Debian:9
From an advisory covering 15 CVEs
 before 8u232-b09-1~deb9u1, plus listed versions
8u131-b11-28u141-b15-18u141-b15-1~deb9u18u141-b15-28u141-b15-3
Show 36 moreShow less
8u144-b01-18u144-b01-28u151-b12-18u151-b12-1~deb9u18u162-b12-18u162-b12-1~bpo8+18u162-b12-1~deb9u18u171-b11-18u171-b11-1~bpo8+18u171-b11-1~deb9u18u171-b11-28u181-b13-18u181-b13-1~deb9u18u181-b13-28u181-b13-2~deb9u18u191-b12-18u191-b12-28u202-b26-18u202-b26-28u202-b26-38u212-b01-18u212-b01-1~deb9u18u212-b03-18u212-b03-28u212-b03-2~deb9u18u222-b04-18u222-b04-38u222-b05-18u222-b07-18u222-b07-28u222-b07-38u222-b10-18u222-b10-1~deb9u18u232-b04-18u232-b07-18u232-b07-2
8u232-b09-1~deb9u1
java-1.8.0-openjdk
Mageia:7
From an advisory covering 14 CVEs
 before 1.8.0.232-1.b09.2.mga7
1.8.0.232-1.b09.2.mga7
java-11-openjdk
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-demo-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-devel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-headless-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-jmods-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-11-openjdk-src-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el7_7
1:11.0.5.10-0.el7_7
java-1.8.0-openjdk
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-accessibility-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-javadoc-zip-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el7_7
1:1.8.0.232.b09-0.el7_7
java-1.8.0-openjdk
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-accessibility
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-demo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-demo-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-devel-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-headless-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-headless-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-javadoc-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:8::appstream
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-0.el8_0
1:1.8.0.232.b09-0.el8_0
java-11-openjdk
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-demo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-devel-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-headless
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-headless-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-headless-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-javadoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-javadoc-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-jmods
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-slowdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-11-openjdk-src
Red Hat:enterprise_linux:8::appstream
From an advisory covering 15 CVEs
 before 1:11.0.5.10-0.el8_0
1:11.0.5.10-0.el8_0
java-1.8.0-openjdk
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-headless
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-demo-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-devel-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-headless-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-javadoc-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-1.8.0-openjdk-src-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
 before 1:1.8.0.232.b09-1.el6_10
1:1.8.0.232.b09-1.el6_10
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 18 CVEs
 before 11.0.5.0-3.36.1
11.0.5.0-3.36.1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 18 CVEs
 before 11.0.5.0-3.36.1
11.0.5.0-3.36.1
java-11-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 18 CVEs
 before 11.0.5.0-3.3.3
11.0.5.0-3.3.3
java-11-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 18 CVEs
 before 11.0.5.0-3.3.3
11.0.5.0-3.3.3
java-1_7_0-openjdk
SUSE:HPE Helion OpenStack 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Enterprise Storage 5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-3.38.1
1.8.0_sr6.10-3.38.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-3.38.1
1.8.0_sr6.10-3.38.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-3.38.1
1.8.0_sr6.10-3.38.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-3.38.1
1.8.0_sr6.10-3.38.1
java-1_8_0-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
java-1_8_0-ibm
SUSE:Enterprise Storage 5
From an advisory covering 11 CVEs
 before 1.8.0_sr6.10-30.69.1
1.8.0_sr6.10-30.69.1
openjdk-8
Ubuntu:16.04:LTS
 before 8u232-b09-0ubuntu1~16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 23 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.1
8u232-b09-0ubuntu1~16.04.1
openjdk-8
Ubuntu:18.04:LTS
 before 8u232-b09-0ubuntu1~18.04.1, plus listed versions
8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1
Show 5 moreShow less
8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.1
8u232-b09-0ubuntu1~18.04.1
openjdk-lts
Ubuntu:18.04:LTS
 before 11.0.5+10-0ubuntu1.1~18.04, plus listed versions
9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2
Show 8 moreShow less
10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.3
11.0.5+10-0ubuntu1.1~18.04
openjdk-13
Ubuntu:20.04:LTS
 All versions, plus listed versions
13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04
 None known
openjdk-8
Ubuntu:16.04:LTS
From an advisory covering 16 CVEs
 before 8u232-b09-0ubuntu1~16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 23 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.1
8u232-b09-0ubuntu1~16.04.1
openjdk-lts
Ubuntu:18.04:LTS
From an advisory covering 16 CVEs
 before 11.0.5+10-0ubuntu1.1~18.04, plus listed versions
9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2
Show 8 moreShow less
10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.3
11.0.5+10-0ubuntu1.1~18.04
java-11-openjdk
openSUSE:Leap 15.0
From an advisory covering 18 CVEs
 before 11.0.5.0-lp150.2.28.1
11.0.5.0-lp150.2.28.1
java-11-openjdk
openSUSE:Leap 15.1
From an advisory covering 18 CVEs
 before 11.0.5.0-lp151.3.9.2
11.0.5.0-lp151.3.9.2
java-1_8_0-openjdk
openSUSE:Leap 15.1
From an advisory covering 17 CVEs
 before 1.8.0.232-lp151.2.6.1
1.8.0.232-lp151.2.6.1
java-11-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 11.0.12.0-3.1
11.0.12.0-3.1
java-13-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 13.0.8.0-3.1
13.0.8.0-3.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 175 CVEs
 before 1.8.0.302-2.2
1.8.0.302-2.2

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2949 is a medium vulnerability (CVSS 6.8) in Oracle Corporation Java, published October 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.59%, the 89th percentile. Fixed in openjdk11 11.0.5_p10-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 46 package rows, 21 versions and 160 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open