{"id":"CVE-2015-5041","aliases":["EUVD-2015-5058","GHSA-7v4m-8wwx-8xgc","RHSA-2016:0098","RHSA-2016:0099","RHSA-2016:0100","RHSA-2016:0101","RHSA-2016:1430","SUSE-SU-2016:0390-1","SUSE-SU-2016:0399-1","SUSE-SU-2016:0401-1","SUSE-SU-2016:0428-1","SUSE-SU-2016:0431-1","SUSE-SU-2016:0433-1","SUSE-SU-2016:0636-1","SUSE-SU-2016:0770-1"],"status":"published","title":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...","description":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03901,"percentile":0.90343,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2016-02-09T10:02:25Z","modified":"2026-08-05T10:03:59Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.2.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.30-1jpp.1.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.30-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.20-1jpp.1.el6_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.40-1jpp.1.el5"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.40-1jpp.1.el5"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-java-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-java-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-java-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-java-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-taskomatic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el5sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.40-1jpp.1.el6_7"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.40-1jpp.1.el6_7"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-java-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-java-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-java-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-java-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-taskomatic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-109.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.40-1jpp.1.el6_7"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.40-1jpp.1.el6_7"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-java-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-java-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-java-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-java-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-taskomatic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-146.el6sat"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-9.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.30-21.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.20-30.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.20-49.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.30-45.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.30-47.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.20-51.1"}]}],"bundled":11}],"products":[{"vendor":"ibm","product":"java_sdk"},{"vendor":"ibm","product":"websphere_application_server"},{"vendor":"redhat","product":"satellite"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"suse_linux_enterprise_server"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV72872","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21974194","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/82451","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5041","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7v4m-8wwx-8xgc"},{"url":"https://access.redhat.com/errata/RHSA-2016:0098","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302689","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0098.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7575","tags":["advisory"]},{"url":"http://www.mitls.org/pages/attacks/SLOTH","tags":["article"]},{"url":"https://access.redhat.com/articles/2112261","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0402","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0448","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0475","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0494","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0099","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291312","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0099.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8540","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0100","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0100.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0101","tags":["advisory"]},{"url":"https://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0101.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353209","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1430.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4734","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4810","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4840","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4840","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4842","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4842","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4844","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4844","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4844","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4860","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4871","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4882","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4883","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4883","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4902","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4903","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5006","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0264","tags":["advisory"]},{"url":"http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_April_2016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0376","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0376","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0686","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3449","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160390-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/960402","tags":["report"]},{"url":"https://bugzilla.suse.com/963937","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0494","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160399-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8540","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160401-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160428-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/960286","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160431-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160433-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160636-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160770-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-5041","description":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.","status":"published","published":"2016-06-06T17:00:00Z","modified":"2024-08-06T06:32:32.251Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2015-5058","description":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.","status":"published","published":"2016-06-06T17:00:00Z","modified":"2024-08-06T06:32:32Z","updated_at":"2026-11-03T02:22:01.747886Z"}],"ghsa":[{"id":"GHSA-7v4m-8wwx-8xgc","title":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...","description":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.","status":"published","published":"2022-05-14T00:57:53Z","modified":"2023-02-02T05:02:46Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:30.862811Z"}],"nvd":[{"id":"CVE-2015-5041","description":"The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.","status":"published","published":"2016-06-06T17:59:00.22Z","modified":"2026-06-17T00:28:21.14Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"RHSA-2016:0099","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T12:26:45Z","modified":"2026-08-05T10:03:40Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0100","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-13T12:26:51Z","modified":"2026-08-05T10:03:40Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0101","title":"Red Hat Security Advisory: java-1.6.0-ibm security update","status":"published","published":"2024-09-13T12:26:58Z","modified":"2026-08-05T10:03:41Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:1430","title":"Red Hat Security Advisory: java-1.7.0-ibm and java-1.7.1-ibm security update","status":"published","published":"2024-09-13T12:27:32Z","modified":"2026-08-05T10:03:59Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:0098","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T12:26:37Z","modified":"2026-08-05T10:03:39Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2016:0390-1","title":"Security update for java-1_8_0-ibm","description":"\nThis update for java-1_8_0-ibm fixes the following security issues by updating to 8.0-2.10 (bsc#963937):\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0475: An unspecified vulnerability related to the Libraries component has partial confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-02-09T10:02:25Z","modified":"2026-02-04T03:43:49.278811Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0399-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues by updating to 7.1-3.30 (bsc#963937):\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-02-10T09:08:59Z","modified":"2026-02-04T03:25:05.261408Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0401-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues by updating to 7.1-3.30 (bsc#963937):\n\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-02-10T09:09:28Z","modified":"2026-02-04T02:24:33.87864Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0428-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n- bsc#960286: resolve package conflicts in the fonts subpackage\n","status":"published","published":"2016-02-11T10:52:08Z","modified":"2026-02-04T04:30:22.667725Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0431-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n- bsc#960286: resolve package conflicts in the fonts subpackage\n","status":"published","published":"2016-02-11T10:52:39Z","modified":"2026-02-04T02:42:12.273517Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0433-1","title":"Security update for java-1_7_0-ibm","description":"\nThis update for java-1_7_0-ibm fixes the following issues by updating to 7.0-9.30 (bsc#963937):\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-02-11T10:52:24Z","modified":"2026-02-04T02:31:21.516129Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0636-1","title":"Security update for java-1_7_0-ibm","description":"\nThis update for java-1_7_0-ibm fixes the following issues by updating to 7.0-9.30 (bsc#963937):\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-03-02T18:02:18Z","modified":"2026-02-04T02:22:36.564783Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0770-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues by updating to 6.0-16.20 (bsc#963937)\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-7981: libpng could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the png_convert_to_rfc1123 function. An attacker could exploit this vulnerability to obtain sensitive information\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8540: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n- bsc#960286: resolve package conflicts in the fonts subpackage\n","status":"published","published":"2016-03-15T12:58:15Z","modified":"2026-02-04T04:16:35.397207Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}