{"id":"CVE-2016-9841","aliases":["ALPINE-CVE-2016-9841","AZL-44316","AZL-45087","BELL-CVE-2016-9841","DEBIAN-CVE-2016-9841","DLA-1725-1","DLA-2085-1","EUVD-2016-10641","GHSA-5f8r-846v-423w","MGASA-2020-0108","OESA-2023-1422","PSF-2017-3","RHSA-2017:1220","RHSA-2017:1221","RHSA-2017:1222","RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3047","RHSA-2017:3453","SUSE-SU-2016:3209-1","SUSE-SU-2017:0003-1","SUSE-SU-2017:0004-1","SUSE-SU-2017:1384-1","SUSE-SU-2017:1385-1","SUSE-SU-2017:1386-1","SUSE-SU-2017:1387-1","SUSE-SU-2017:1389-1","SUSE-SU-2017:1444-1","SUSE-SU-2017:2699-1","SUSE-SU-2017:2700-1","SUSE-SU-2017:2989-1","SUSE-SU-2017:3235-1","SUSE-SU-2017:3369-1","SUSE-SU-2017:3411-1","SUSE-SU-2017:3440-1","SUSE-SU-2017:3455-1","SUSE-SU-2018:0005-1","SUSE-SU-2018:0061-1","SUSE-SU-2018:1815-1","UBUNTU-CVE-2016-9841","USN-4246-1","USN-4292-1","USN-6736-1","USN-6736-2"],"status":"published","title":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0755,"percentile":0.94554,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-12-21T15:25:07Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.5","package":"perl","fixed_in":["5.24.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"perl","fixed_in":["5.24.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"zlib","fixed_in":["1.2.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"zlib","fixed_in":["1.2.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"zlib","fixed_in":["1.2.11-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"fltk","fixed_in":["1.3.8-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rsync","fixed_in":["3.1.3-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rsync","fixed_in":["3.1.3-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rsync","fixed_in":["3.1.3-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"zlib","fixed_in":["1:1.2.8.dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zlib","fixed_in":["1:1.2.8.dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zlib","fixed_in":["1:1.2.8.dfsg-4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"syslinux","fixed_in":["6.04-12.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"syslinux","fixed_in":["6.04-12.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"syslinux","fixed_in":["6.04-14.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"syslinux","fixed_in":["6.04-14.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"syslinux","fixed_in":["6.04-14.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","fixed_in":["2.0.3-0ubuntu1.14.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"rsync","fixed_in":["3.1.1-3ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"zlib","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","fixed_in":["2.0.4-8ubuntu1.16.04.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"rsync","fixed_in":["3.1.2-2.1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","fixed_in":["2.0.4-9ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"klibc","fixed_in":["2.0.7-1ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"rsync","fixed_in":["3.1.3-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"klibc","fixed_in":["2.0.10-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"klibc","fixed_in":["2.0.13-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"klibc","fixed_in":["2.0.13-4ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.24.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.24.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.11-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3+deb8u2"}]}],"versions":["3.1.1-3","3.1.1-3+deb8u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2+deb8u1"}]}],"versions":["1:1.2.8.dfsg-2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:7","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-4.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"syslinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.04-12.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"syslinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.04-12.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"syslinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.04-14.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"syslinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.04-14.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"syslinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.04-14.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.2.el6_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.5-1jpp.1.el7_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.45-1jpp.1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-0.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-0.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-0.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.5-64.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.5-64.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.5-64.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-37.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.5-29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.5-25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.45-49.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.45-84.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.45-84.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.45-84.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-50.3.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7-0.135.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.14.04.3+esm3"}]}],"versions":["2.0.1-3.1ubuntu2","2.0.2-1ubuntu1","2.0.2-1ubuntu2","2.0.3-0ubuntu1","2.0.3-0ubuntu1.14.04.1","2.0.3-0ubuntu1.14.04.2","2.0.3-0ubuntu1.14.04.3","2.0.3-0ubuntu1.14.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.8.dfsg-1ubuntu1","1:1.2.8.dfsg-1ubuntu1.1","1:1.2.8.dfsg-1ubuntu1.1+esm1","1:1.2.8.dfsg-1ubuntu1.1+esm2","1:1.2.8.dfsg-1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3"}]}],"versions":["1:1.2.8.dfsg-2ubuntu4","1:1.2.8.dfsg-2ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-8ubuntu1.16.04.4+esm2"}]}],"versions":["2.0.3-0ubuntu1","2.0.4-4","2.0.4-6","2.0.4-7","2.0.4-8","2.0.4-8ubuntu1","2.0.4-8ubuntu1.16.04.1","2.0.4-8ubuntu1.16.04.2","2.0.4-8ubuntu1.16.04.3","2.0.4-8ubuntu1.16.04.4","2.0.4-8ubuntu1.16.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.1"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9ubuntu2.2+esm1"}]}],"versions":["2.0.4-9ubuntu1","2.0.4-9ubuntu2","2.0.4-9ubuntu2.1","2.0.4-9ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-2ubuntu1","0.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-1ubuntu5.2"}]}],"versions":["2.0.6-1ubuntu1","2.0.6-1ubuntu2","2.0.7-1ubuntu1","2.0.7-1ubuntu3","2.0.7-1ubuntu4","2.0.7-1ubuntu5","2.0.7-1ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-6"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-4ubuntu0.1"}]}],"versions":["2.0.8-6.1ubuntu2","2.0.10-3","2.0.10-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-4ubuntu0.1"}]}],"versions":["2.0.13-1","2.0.13-2","2.0.13-2ubuntu1","2.0.13-4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-5","0.6.2-5build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-4ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-7ubuntu1","0.6.2-8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-9","0.6.3-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"zsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.2-8","0.6.2-9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3"}]}],"versions":["1:1.2.8.dfsg-2ubuntu4","1:1.2.8.dfsg-2ubuntu4.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.1"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.14.04.3+esm3"}]}],"versions":["2.0.1-3.1ubuntu2","2.0.2-1ubuntu1","2.0.2-1ubuntu2","2.0.3-0ubuntu1","2.0.3-0ubuntu1.14.04.1","2.0.3-0ubuntu1.14.04.2","2.0.3-0ubuntu1.14.04.3","2.0.3-0ubuntu1.14.04.3+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-8ubuntu1.16.04.4+esm2"}]}],"versions":["2.0.3-0ubuntu1","2.0.4-4","2.0.4-6","2.0.4-7","2.0.4-8","2.0.4-8ubuntu1","2.0.4-8ubuntu1.16.04.1","2.0.4-8ubuntu1.16.04.2","2.0.4-8ubuntu1.16.04.3","2.0.4-8ubuntu1.16.04.4","2.0.4-8ubuntu1.16.04.4+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9ubuntu2.2+esm1"}]}],"versions":["2.0.4-9ubuntu1","2.0.4-9ubuntu2","2.0.4-9ubuntu2.1","2.0.4-9ubuntu2.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-1ubuntu5.2"}]}],"versions":["2.0.6-1ubuntu1","2.0.6-1ubuntu2","2.0.7-1ubuntu1","2.0.7-1ubuntu3","2.0.7-1ubuntu4","2.0.7-1ubuntu5","2.0.7-1ubuntu5.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-4ubuntu0.1"}]}],"versions":["2.0.8-6.1ubuntu2","2.0.10-3","2.0.10-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-4ubuntu0.1"}]}],"versions":["2.0.13-1","2.0.13-2","2.0.13-2ubuntu1","2.0.13-4"],"bundled":4}],"products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"e-series_santricity_management"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_storage_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services"},{"vendor":"netapp","product":"hci_storage_node"},{"vendor":"netapp","product":"oncommand_balance"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_performance_manager"},{"vendor":"netapp","product":"oncommand_shift"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"solidfire"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"netapp","product":"storage_replication_adapter_for_clustered_data_ontap"},{"vendor":"netapp","product":"symantec_netbackup"},{"vendor":"netapp","product":"vasa_provider_for_clustered_data_ontap"},{"vendor":"netapp","product":"virtual_storage_console"},{"vendor":"nodejs","product":"node.js"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"database_server"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"mysql"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"},{"vendor":"siemens","product":"cadra"},{"vendor":"zlib","product":"zlib"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:1221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1220","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3047","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/05/21","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://www.securityfocus.com/bid/95131","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3046","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1039596","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201701-56","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1039427","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1222","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2999","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4246-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4292-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://support.apple.com/HT208144","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.apple.com/HT208113","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/HT208112","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/HT208115","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf","tags":["x_refsource_MISC","x_transferred","web","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402346","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20171019-0001/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202007-54","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-470355.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9841","tags":["web","advisory"]},{"url":"https://usn.ubuntu.com/4292-1"},{"url":"https://usn.ubuntu.com/4246-1"},{"url":"https://security.netapp.com/advisory/ntap-20171019-0001"},{"url":"https://github.com/advisories/GHSA-5f8r-846v-423w"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-9841","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-9841","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9841","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0108.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26254","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1422","tags":["advisory"]},{"url":"https://bugs.python.org/issue29169","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449603","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1220.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9840","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9840","tags":["advisory"]},{"url":"https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9841","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9841","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9842","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9842","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3509","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3533","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3539","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3544","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1221.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1222.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u151-relnotes-3850493.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503320","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2999.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10165","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10165","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10274","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10281","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10281","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10293","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10345","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10346","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10346","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10347","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10349","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10349","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10350","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10350","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10350","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10355","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10355","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10356","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10357","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10357","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10357","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10388","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/eol-135779.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3046.json","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_171","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3047.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472667","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3453.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10078","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10087","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10087","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10102","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10105","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10107","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10109","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10109","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10110","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10115","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10243","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163209-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1003577","tags":["report"]},{"url":"https://bugzilla.suse.com/1003579","tags":["report"]},{"url":"https://bugzilla.suse.com/1003580","tags":["report"]},{"url":"https://bugzilla.suse.com/1013882","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170003-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170004-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171384-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1038505","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171385-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171386-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171387-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171389-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027038","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171444-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172699-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1056193","tags":["report"]},{"url":"https://bugzilla.suse.com/975726","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9233","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172700-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172989-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1032647","tags":["report"]},{"url":"https://bugzilla.suse.com/1052009","tags":["report"]},{"url":"https://bugzilla.suse.com/1064069","tags":["report"]},{"url":"https://bugzilla.suse.com/1064070","tags":["report"]},{"url":"https://bugzilla.suse.com/1064071","tags":["report"]},{"url":"https://bugzilla.suse.com/1064072","tags":["report"]},{"url":"https://bugzilla.suse.com/1064073","tags":["report"]},{"url":"https://bugzilla.suse.com/1064075","tags":["report"]},{"url":"https://bugzilla.suse.com/1064077","tags":["report"]},{"url":"https://bugzilla.suse.com/1064078","tags":["report"]},{"url":"https://bugzilla.suse.com/1064079","tags":["report"]},{"url":"https://bugzilla.suse.com/1064080","tags":["report"]},{"url":"https://bugzilla.suse.com/1064081","tags":["report"]},{"url":"https://bugzilla.suse.com/1064082","tags":["report"]},{"url":"https://bugzilla.suse.com/1064083","tags":["report"]},{"url":"https://bugzilla.suse.com/1064084","tags":["report"]},{"url":"https://bugzilla.suse.com/1064085","tags":["report"]},{"url":"https://bugzilla.suse.com/1064086","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173235-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1070162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10293","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173369-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173411-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10309","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173440-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173455-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049305","tags":["report"]},{"url":"https://bugzilla.suse.com/1049306","tags":["report"]},{"url":"https://bugzilla.suse.com/1049307","tags":["report"]},{"url":"https://bugzilla.suse.com/1049309","tags":["report"]},{"url":"https://bugzilla.suse.com/1049310","tags":["report"]},{"url":"https://bugzilla.suse.com/1049311","tags":["report"]},{"url":"https://bugzilla.suse.com/1049312","tags":["report"]},{"url":"https://bugzilla.suse.com/1049313","tags":["report"]},{"url":"https://bugzilla.suse.com/1049314","tags":["report"]},{"url":"https://bugzilla.suse.com/1049315","tags":["report"]},{"url":"https://bugzilla.suse.com/1049316","tags":["report"]},{"url":"https://bugzilla.suse.com/1049317","tags":["report"]},{"url":"https://bugzilla.suse.com/1049318","tags":["report"]},{"url":"https://bugzilla.suse.com/1049319","tags":["report"]},{"url":"https://bugzilla.suse.com/1049320","tags":["report"]},{"url":"https://bugzilla.suse.com/1049321","tags":["report"]},{"url":"https://bugzilla.suse.com/1049322","tags":["report"]},{"url":"https://bugzilla.suse.com/1049323","tags":["report"]},{"url":"https://bugzilla.suse.com/1049324","tags":["report"]},{"url":"https://bugzilla.suse.com/1049325","tags":["report"]},{"url":"https://bugzilla.suse.com/1049326","tags":["report"]},{"url":"https://bugzilla.suse.com/1049327","tags":["report"]},{"url":"https://bugzilla.suse.com/1049328","tags":["report"]},{"url":"https://bugzilla.suse.com/1049329","tags":["report"]},{"url":"https://bugzilla.suse.com/1049330","tags":["report"]},{"url":"https://bugzilla.suse.com/1049331","tags":["report"]},{"url":"https://bugzilla.suse.com/1049332","tags":["report"]},{"url":"https://bugzilla.suse.com/1052318","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180061-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181815-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1095016","tags":["report"]},{"url":"https://bugzilla.suse.com/912771","tags":["report"]},{"url":"https://bugzilla.suse.com/920442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9841","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4246-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4292-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6736-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6736-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37434","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T03:56:00Z","modified":"2026-10-08T21:13:51.698Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-10641","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T03:56:00Z","modified":"2026-10-08T21:13:51Z","updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-5f8r-846v-423w","title":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2022-05-13T01:25:01Z","modified":"2026-07-14T12:32:09Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:09:27.031Z"}],"nvd":[{"id":"CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01.743Z","modified":"2026-10-08T22:16:40.06Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:38.290327Z"}],"osv":[{"id":"ALPINE-CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01.743Z","modified":"2026-09-22T06:17:50.254545622Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"AZL-44316","title":"CVE-2016-9841 affecting package fltk for versions less than 1.3.8-1","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01Z","modified":"2026-04-21T04:52:18.37658Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-45087","title":"CVE-2016-9841 affecting package openjpeg2 2.3.1-12","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"BELL-CVE-2016-9841","title":"CVE-2016-9841 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:24.820673Z","modified":"2026-01-26T09:45:40.090533Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01.743Z","modified":"2026-10-24T14:12:26.668492336Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:01.743Z","modified":"2026-10-09T01:47:21.337251213Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"OESA-2023-1422","title":"syslinux security update","description":"The Syslinux Project covers lightweight bootloaders for MS-DOS FAT filesystems (SYSLINUX), network booting (PXELINUX), bootable \"El Torito\" CD-ROMs (ISOLINUX), and Linux ext2/ext3/ext4 or btrfs filesystems (EXTLINUX). The project also includes MEMDISK, a tool to boot legacy operating systems (such as DOS) from nontraditional media; it is usually used in conjunction with PXELINUX and ISOLINUX.\n\nSecurity Fix(es):\n\ninffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.(CVE-2016-9841)","status":"published","published":"2023-07-15T11:05:53Z","modified":"2026-08-18T01:16:42.763518781Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2017:1220","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T14:39:42Z","modified":"2026-10-09T10:01:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1221","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T14:39:49Z","modified":"2026-10-09T10:01:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1222","title":"Red Hat Security Advisory: java-1.6.0-ibm security update","status":"published","published":"2024-09-13T14:39:55Z","modified":"2026-10-09T10:01:23Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2999","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-13T14:42:18Z","modified":"2026-10-09T10:01:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3046","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-13T14:42:24Z","modified":"2026-10-09T10:01:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3047","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-13T14:42:29Z","modified":"2026-10-09T10:01:26Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3453","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T14:43:02Z","modified":"2026-10-09T10:01:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2016-9841","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T04:29:00Z","modified":"2026-10-17T12:52:55.190289313Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-1725-1","title":"rsync - security update","status":"published","published":"2019-03-24T00:00:00Z","modified":"2026-03-09T01:20:46.571218Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2085-1","title":"zlib - security update","status":"published","published":"2020-01-29T00:00:00Z","modified":"2026-03-09T01:21:34.515399Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0108","title":"Updated rsync packages fix security vulnerabilities","description":"Updated rsync packages fix security vulnerabilities:\n\nIt was discovered that rsync incorrectly handled pointer arithmetic in\nzlib. An attacker could use this issue to cause rsync to crash, resulting\nin a denial of service, or possibly execute arbitrary code (CVE-2016-9840,\nCVE-2016-9841)\n\nIt was discovered that rsync incorrectly handled vectors involving left\nshifts of negative integers in zlib. An attacker could use this issue to\ncause rsync to crash, resulting in a denial of service, or possibly\nexecute arbitrary code (CVE-2016-9842).\n\nIt was discovered that rsync incorrectly handled vectors involving big-\nendian CRC calculation in zlib. An attacker could use this issue to cause\nrsync to crash, resulting in a denial of service, or possibly execute\narbitrary code (CVE-2016-9843).\n\nPlease note, we now compile against system zlib. If rsync fails to sync\nwith older remote systems using compression (-z), you have either update\nthe remote host to a newer version or disable compression.\n","status":"published","published":"2020-02-29T13:42:35Z","modified":"2026-04-16T04:42:38.563544588Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"PSF-2017-3","title":"Zlib 1.2.11","description":"inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.","status":"published","published":"2017-05-23T03:56:00Z","modified":"2025-10-09T01:02:08.775824Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"SUSE-SU-2016:3209-1","title":"Security update for zlib","description":"\nThis update for zlib fixes the following issues:\n\n  * Incompatible declarations for external linkage function deflate (bnc#1003577)\n  * CVE-2016-9842: Undefined Left Shift of Negative Number (bnc#1003580) \n  * CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bnc#1003579)\n  * CVE-2016-9843: Big-endian out-of-bounds pointer\n","status":"published","published":"2016-12-21T15:25:07Z","modified":"2026-02-04T03:07:37.609978Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0003-1","title":"Security update for zlib","description":"\nThis update for zlib fixes the following issues:\n\nCVE-2016-9843: Big-endian out-of-bounds pointer\n\nCVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) \n\nCVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)\n\nIncompatible declarations for external linkage function deflate (bsc#1003577)\n\n","status":"published","published":"2017-01-02T07:35:21Z","modified":"2026-02-04T03:35:20.185897Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0004-1","title":"Security update for zlib","description":"\nThis update for zlib fixes the following issues:\n\nCVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)\n\nCVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) \n\nCVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579)\n\nIncompatible declarations for external linkage function deflate (bsc#1003577)\n\n","status":"published","published":"2017-01-02T07:37:00Z","modified":"2026-02-04T02:29:00.392144Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1384-1","title":"Security update for java-1_7_0-ibm","description":"\nThis update for java-1_7_0-ibm fixes the following issues:\n\nVersion update to 7.0-10.5 bsc#1038505\n\n  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n  - CVE-2016-9842: zlib: Undefined left shift of negative number\n  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n  - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n  - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n  - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n  - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n  - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n","status":"published","published":"2017-05-23T13:37:57Z","modified":"2026-02-04T02:40:52.007894Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1385-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues:\n\n- Version update to 7.1-4.5 bsc#1038505\n\n  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n  - CVE-2016-9842: zlib: Undefined left shift of negative number\n  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n  - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n  - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n  - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n  - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n  - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n","status":"published","published":"2017-05-23T13:38:24Z","modified":"2025-05-02T04:05:43.864586Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1386-1","title":"Security update for java-1_8_0-ibm","description":"\nThis update for java-1_8_0-ibm fixes the following issues:\n\nVersion update bsc#1038505:\n\n- CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n- CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n- CVE-2016-9842: zlib: Undefined left shift of negative number\n- CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n- CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n- CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n- CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n- CVE-2017-3533: OpenJDK: newline injection in the FTP client \n- CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n- CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n\n\n","status":"published","published":"2017-05-23T13:37:36Z","modified":"2026-02-04T02:55:33.256475Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1387-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues:\n\nVersion update to 7.1-4.5 bsc#1038505\n\n  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n  - CVE-2016-9842: zlib: Undefined left shift of negative number\n  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n  - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n  - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n  - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher \n  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n  - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n  - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n\n","status":"published","published":"2017-05-23T13:37:48Z","modified":"2026-02-04T03:11:50.578814Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1389-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues:\n\n- Version update to 6.0-16.45 bsc#1038505\n\n  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n  - CVE-2016-9842: zlib: Undefined left shift of negative number\n  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n  - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n  - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n  - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n  - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183\n\n","status":"published","published":"2017-05-23T13:36:48Z","modified":"2026-02-04T03:22:30.813032Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1444-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues:\n\n\n  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c\n  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c\n  - CVE-2016-9842: zlib: Undefined left shift of negative number\n  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer\n  - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data\n  - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections \n  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification \n  - CVE-2017-3533: OpenJDK: newline injection in the FTP client\n  - CVE-2017-3544: OpenJDK: newline injection in the SMTP client\n\n- Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183","status":"published","published":"2017-05-30T11:19:09Z","modified":"2026-02-04T04:05:08.008402Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:2699-1","title":"Security update for SLES 12 Docker image","description":"The SUSE Linux Enterprise Server 12 container image has been updated to include\nsecurity and stability fixes.\n\nThe following issues related to building of the container images have been fixed:\n\n- Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a\n  dependency by the Build Service solver. (bsc#1056193)\n- Do not install recommended packages when building container images. (bsc#975726)\n\nA number of security issues that have been already fixed by updates released for\nSUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE\ncross-reference is available below.\n\npam:\n\n- CVE-2015-3238\n\nlibtasn1:\n\n- CVE-2015-3622\n- CVE-2016-4008\n\nlibidn:\n\n- CVE-2015-2059\n- CVE-2015-8948\n- CVE-2016-6261\n- CVE-2016-6262\n- CVE-2016-6263\n\nzlib:\n\n- CVE-2016-9840\n- CVE-2016-9841\n- CVE-2016-9842\n- CVE-2016-9843\n\ncurl:\n\n- CVE-2016-5419\n- CVE-2016-5420\n- CVE-2016-5421\n- CVE-2016-7141\n- CVE-2016-7167\n- CVE-2016-8615\n- CVE-2016-8616\n- CVE-2016-8617\n- CVE-2016-8618\n- CVE-2016-8619\n- CVE-2016-8620\n- CVE-2016-8621\n- CVE-2016-8622\n- CVE-2016-8623\n- CVE-2016-8624\n- CVE-2016-9586\n- CVE-2017-1000100\n- CVE-2017-1000101\n- CVE-2017-7407\n\nopenssl:\n\n- CVE-2016-2105\n- CVE-2016-2106\n- CVE-2016-2107\n- CVE-2016-2108\n- CVE-2016-2109\n- CVE-2016-2177\n- CVE-2016-2178\n- CVE-2016-2179\n- CVE-2016-2180\n- CVE-2016-2181\n- CVE-2016-2182\n- CVE-2016-2183\n- CVE-2016-6302\n- CVE-2016-6303\n- CVE-2016-6304\n- CVE-2016-6306\n\nlibxml2:\n\n- CVE-2014-0191\n- CVE-2015-8806\n- CVE-2016-1762\n- CVE-2016-1833\n- CVE-2016-1834\n- CVE-2016-1835\n- CVE-2016-1837\n- CVE-2016-1838\n- CVE-2016-1839\n- CVE-2016-1840\n- CVE-2016-2073\n- CVE-2016-3627\n- CVE-2016-3705\n- CVE-2016-4447\n- CVE-2016-4448\n- CVE-2016-4449\n- CVE-2016-4483\n- CVE-2016-4658\n- CVE-2016-9318\n- CVE-2016-9597\n- CVE-2017-9047\n- CVE-2017-9048\n- CVE-2017-9049\n- CVE-2017-9050\n\nutil-linux:\n\n- CVE-2015-5218\n- CVE-2016-5011\n- CVE-2017-2616\n\ncracklib:\n\n- CVE-2016-6318\n\nsystemd:\n\n- CVE-2014-9770\n- CVE-2015-8842\n- CVE-2016-7796\n\npcre:\n\n- CVE-2014-8964\n- CVE-2015-2325\n- CVE-2015-2327\n- CVE-2015-2328\n- CVE-2015-3210\n- CVE-2015-3217\n- CVE-2015-5073\n- CVE-2015-8380\n- CVE-2015-8381\n- CVE-2015-8382\n- CVE-2015-8383\n- CVE-2015-8384\n- CVE-2015-8385\n- CVE-2015-8386\n- CVE-2015-8387\n- CVE-2015-8388\n- CVE-2015-8389\n- CVE-2015-8390\n- CVE-2015-8391\n- CVE-2015-8392\n- CVE-2015-8393\n- CVE-2015-8394\n- CVE-2015-8395\n- CVE-2016-1283\n- CVE-2016-3191\n\nappamor:\n\n- CVE-2017-6507\n\nbash:\n\n- CVE-2014-6277\n- CVE-2014-6278\n- CVE-2016-0634\n- CVE-2016-7543\n\ncpio:\n\n- CVE-2016-2037\n\nglibc:\n\n- CVE-2016-1234\n- CVE-2016-3075\n- CVE-2016-3706\n- CVE-2016-4429\n- CVE-2017-1000366\n\nperl:\n\n- CVE-2015-8853\n- CVE-2016-1238\n- CVE-2016-2381\n- CVE-2016-6185\n\nlibssh2_org:\n\n- CVE-2016-0787\n\nexpat:\n\n- CVE-2012-6702\n- CVE-2015-1283\n- CVE-2016-0718\n- CVE-2016-5300\n- CVE-2016-9063\n- CVE-2017-9233\n\nncurses:\n\n- CVE-2017-10684\n- CVE-2017-10685\n- CVE-2017-11112\n- CVE-2017-11113\n\nlibksba:\n\n- CVE-2016-4574\n- CVE-2016-4579\n\nlibgcrypt:\n\n- CVE-2015-7511\n- CVE-2016-6313\n- CVE-2017-7526\n\ndbus-1:\n\n- CVE-2014-7824\n- CVE-2015-0245\n\nFinally, the following packages received non-security fixes:\n\n- augeas\n- bzip2\n- ca-certificates-mozilla\n- coreutils\n- cryptsetup\n- cyrus-sasl\n- dirmngr\n- e2fsprogs\n- findutils\n- gpg2\n- insserv-compat\n- kmod\n- libcap\n- libsolv\n- libzypp\n- openldap2\n- p11-kit\n- permissions\n- procps\n- rpm\n- sed\n- shadow\n- zypper\n","status":"published","published":"2017-10-10T19:37:24Z","modified":"2026-02-04T03:24:03.922844Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2700-1","title":"Security update for SLES 12-SP1 Docker image","description":"The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include\nsecurity and stability fixes.\n\nThe following issues related to building of the container images have been fixed:\n\n- Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a\n  dependency by the Build Service solver. (bsc#1056193)\n- Do not install recommended packages when building container images. (bsc#975726)\n\nA number of security issues that have been already fixed by updates released for\nSUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE\ncross-reference is available below.\n\npam:\n\n- CVE-2015-3238\n\nlibtasn1:\n\n- CVE-2015-3622\n- CVE-2016-4008\n\nexpat:\n\nexpat:\n\n- CVE-2012-6702\n- CVE-2015-1283\n- CVE-2016-0718\n- CVE-2016-5300\n- CVE-2016-9063\n- CVE-2017-9233\n\nlibidn:\n\n- CVE-2015-2059\n- CVE-2015-8948\n- CVE-2016-6261\n- CVE-2016-6262\n- CVE-2016-6263\n\n\nzlib:\n\n- CVE-2016-9840\n- CVE-2016-9841\n- CVE-2016-9842\n- CVE-2016-9843\n\ncurl:\n\n- CVE-2016-5419\n- CVE-2016-5420\n- CVE-2016-5421\n- CVE-2016-7141\n- CVE-2016-7167\n- CVE-2016-8615\n- CVE-2016-8616\n- CVE-2016-8617\n- CVE-2016-8618\n- CVE-2016-8619\n- CVE-2016-8620\n- CVE-2016-8621\n- CVE-2016-8622\n- CVE-2016-8623\n- CVE-2016-8624\n- CVE-2016-9586\n- CVE-2017-1000100\n- CVE-2017-1000101\n- CVE-2017-7407\n\nopenssl:\n\n- CVE-2016-2105\n- CVE-2016-2106\n- CVE-2016-2107\n- CVE-2016-2108\n- CVE-2016-2109\n- CVE-2016-2177\n- CVE-2016-2178\n- CVE-2016-2179\n- CVE-2016-2180\n- CVE-2016-2181\n- CVE-2016-2182\n- CVE-2016-2183\n- CVE-2016-6302\n- CVE-2016-6303\n- CVE-2016-6304\n- CVE-2016-6306\n- CVE-2016-7056\n- CVE-2016-8610\n- CVE-2017-3731\n\ncracklib:\n\n- CVE-2016-6318\n\npcre:\n\n- CVE-2014-8964\n- CVE-2015-2325\n- CVE-2015-2327\n- CVE-2015-2328\n- CVE-2015-3210\n- CVE-2015-3217\n- CVE-2015-5073\n- CVE-2015-8380\n- CVE-2015-8381\n- CVE-2015-8382\n- CVE-2015-8383\n- CVE-2015-8384\n- CVE-2015-8385\n- CVE-2015-8386\n- CVE-2015-8387\n- CVE-2015-8388\n- CVE-2015-8389\n- CVE-2015-8390\n- CVE-2015-8391\n- CVE-2015-8392\n- CVE-2015-8393\n- CVE-2015-8394\n- CVE-2015-8395\n- CVE-2016-1283\n- CVE-2016-3191\n\nappamor:\n\n- CVE-2017-6507\n\nbash:\n\n- CVE-2014-6277\n- CVE-2014-6278\n- CVE-2016-0634\n- CVE-2016-7543\n\ncpio:\n\n- CVE-2016-2037\n\nglibc:\n\n- CVE-2016-1234\n- CVE-2016-3075\n- CVE-2016-3706\n- CVE-2016-4429\n- CVE-2017-1000366\n\nperl:\n\n- CVE-2015-8853\n- CVE-2016-1238\n- CVE-2016-2381\n- CVE-2016-6185\n\nlibssh2_org:\n\n- CVE-2016-0787\n\nutil-linux:\n\n- CVE-2016-5011\n- CVE-2017-2616\n\nncurses:\n\n- CVE-2017-10684\n- CVE-2017-10685\n- CVE-2017-11112\n- CVE-2017-11113\n\nlibksba:\n\n- CVE-2016-4574\n- CVE-2016-4579\n\nlibxml2:\n\n- CVE-2014-0191\n- CVE-2015-8806\n- CVE-2016-1762\n- CVE-2016-1833\n- CVE-2016-1834\n- CVE-2016-1835\n- CVE-2016-1837\n- CVE-2016-1838\n- CVE-2016-1839\n- CVE-2016-1840\n- CVE-2016-2073\n- CVE-2016-3627\n- CVE-2016-3705\n- CVE-2016-4447\n- CVE-2016-4448\n- CVE-2016-4449\n- CVE-2016-4483\n- CVE-2016-4658\n- CVE-2016-9318\n- CVE-2016-9597\n- CVE-2017-9047\n- CVE-2017-9048\n- CVE-2017-9049\n- CVE-2017-9050\n\nlibgcrypt:\n\n- CVE-2015-7511\n- CVE-2016-6313\n- CVE-2017-7526\n\nupdate-alternatives:\n\n- CVE-2015-0860\n\nsystemd:\n\n- CVE-2014-9770\n- CVE-2015-8842\n- CVE-2016-7796\n\ndbus-1:\n\n- CVE-2014-7824\n- CVE-2015-0245\n\nFinally, the following packages received non-security fixes:\n\n- augeas\n- bzip2\n- ca-certificates-mozilla\n- coreutils\n- cryptsetup\n- cyrus-sasl\n- dirmngr\n- e2fsprogs\n- findutils\n- gpg2\n- insserv-compat\n- kmod\n- libcap\n- libsolv\n- libzypp\n- lua51\n- lvm2\n- netcfg\n- p11-kit\n- permissions\n- procps\n- rpm\n- sed\n- sg3_utils\n- shadow\n- zypper\n","status":"published","published":"2017-10-10T19:37:36Z","modified":"2026-02-04T03:03:17.897778Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2989-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Update to version jdk8u151 (icedtea 3.6.0)\n\nSecurity issues fixed:\n\n- CVE-2017-10274: Handle smartcard clean up better (bsc#1064071)\n- CVE-2017-10281: Better queuing priorities (bsc#1064072)\n- CVE-2017-10285: Unreferenced references (bsc#1064073)\n- CVE-2017-10295: Better URL connections (bsc#1064075)\n- CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086)\n- CVE-2017-10346: Better invokespecial checks (bsc#1064078)\n- CVE-2017-10350: Better Base Exceptions (bsc#1064082)\n- CVE-2017-10347: Better timezone processing (bsc#1064079)\n- CVE-2017-10349: Better X processing (bsc#1064081)\n- CVE-2017-10345: Better keystore handling (bsc#1064077)\n- CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080)\n- CVE-2017-10357: Process Proxy presentation (bsc#1064085)\n- CVE-2017-10355: More stable connection processing (bsc#1064083)\n- CVE-2017-10356: Update storage implementations (bsc#1064084)\n- CVE-2016-10165: Improve CMS header processing (bsc#1064069)\n- CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade compression library (bsc#1064070)\n\nBug fixes:\n\n- Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs\n","status":"published","published":"2017-11-10T12:10:06Z","modified":"2026-02-04T02:45:00.189511Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3235-1","title":"Security update for java-1_6_0-ibm","description":"This update for java-1_6_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 6.0.16.50 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2017-10355 CVE-2017-10357\n    CVE-2017-10348 CVE-2017-10349 CVE-2017-10347 CVE-2017-10350\n    CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2017-12-07T14:33:20Z","modified":"2026-02-04T03:46:42.034664Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3369-1","title":"Security update for java-1_6_0-ibm","description":"This update for java-1_6_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 6.0.16.50 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2017-10355 CVE-2017-10357\n    CVE-2017-10348 CVE-2017-10349 CVE-2017-10347 CVE-2017-10350\n    CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2017-12-19T07:37:18Z","modified":"2026-02-04T04:09:51.549917Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3411-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 8.0.5.5 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10309\n    CVE-2017-10356 CVE-2017-10293 CVE-2016-9841  CVE-2016-10165\n    CVE-2017-10355 CVE-2017-10357 CVE-2017-10348 CVE-2017-10349\n    CVE-2017-10347 CVE-2017-10350 CVE-2017-10281 CVE-2017-10295\n    CVE-2017-10345\n","status":"published","published":"2017-12-22T10:08:34Z","modified":"2026-02-04T03:09:58.895291Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3440-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n* CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10348: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10388: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2016-9841:  'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10293: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10345: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10350: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10356: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10357: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10347: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10355: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10285: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10281: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10295: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10346: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2016-10165: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n","status":"published","published":"2017-12-27T09:56:33Z","modified":"2026-02-04T03:09:40.475404Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3455-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n- Security update to version 7.1.4.15 [bsc#1070162]\n  \n  * CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10348: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10388: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2016-9841:  'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10293: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10345: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10350: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10356: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10357: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10347: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10355: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10285: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10281: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10295: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10346: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2016-10165: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n  \n  ","status":"published","published":"2017-12-29T22:12:17Z","modified":"2026-02-04T03:03:06.001187Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0005-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-10356: Fix issue inside subcomponent Security (bsc#1064084).\n- CVE-2017-10274: Fix issue inside subcomponent Smart Card IO (bsc#1064071).\n- CVE-2017-10281: Fix issue inside subcomponent Serialization (bsc#1064072).\n- CVE-2017-10285: Fix issue inside subcomponent RMI (bsc#1064073).\n- CVE-2017-10295: Fix issue inside subcomponent Networking (bsc#1064075).\n- CVE-2017-10388: Fix issue inside subcomponent Libraries (bsc#1064086).\n- CVE-2017-10346: Fix issue inside subcomponent Hotspot (bsc#1064078).\n- CVE-2017-10350: Fix issue inside subcomponent JAX-WS (bsc#1064082).\n- CVE-2017-10347: Fix issue inside subcomponent Serialization (bsc#1064079).\n- CVE-2017-10349: Fix issue inside subcomponent JAXP (bsc#1064081).\n- CVE-2017-10345: Fix issue inside subcomponent Serialization (bsc#1064077).\n- CVE-2017-10348: Fix issue inside subcomponent Libraries (bsc#1064080).\n- CVE-2017-10357: Fix issue inside subcomponent Serialization (bsc#1064085).\n- CVE-2017-10355: Fix issue inside subcomponent Networking (bsc#1064083).\n- CVE-2017-10102: Fix incorrect handling of references in DGC (bsc#1049316).\n- CVE-2017-10053: Fix reading of unprocessed image data in JPEGImageReader (bsc#1049305).\n- CVE-2017-10067: Fix JAR verifier incorrect handling of missing digest (bsc#1049306).\n- CVE-2017-10081: Fix incorrect bracket processing in function signature handling (bsc#1049309).\n- CVE-2017-10087: Fix insufficient access control checks in ThreadPoolExecutor (bsc#1049311).\n- CVE-2017-10089: Fix insufficient access control checks in ServiceRegistry (bsc#1049312).\n- CVE-2017-10090: Fix insufficient access control checks in AsynchronousChannelGroupImpl (bsc#1049313).\n- CVE-2017-10096: Fix insufficient access control checks in XML transformations (bsc#1049314).\n- CVE-2017-10101: Fix unrestricted access to com.sun.org.apache.xml.internal.resolver (bsc#1049315).\n- CVE-2017-10107: Fix insufficient access control checks in ActivationID (bsc#1049318).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10110: Fix insufficient access control checks in ImageWatched (bsc#1049321).\n- CVE-2017-10108: Fix unbounded memory allocation in BasicAttribute deserialization (bsc#1049319).\n- CVE-2017-10109: Fix unbounded memory allocation in CodeSource deserialization (bsc#1049320).\n- CVE-2017-10115: Fix unspecified vulnerability in subcomponent JCE (bsc#1049324).\n- CVE-2017-10118: Fix ECDSA implementation timing attack (bsc#1049326).\n- CVE-2017-10116: Fix LDAPCertStore following referrals to non-LDAP URL (bsc#1049325).\n- CVE-2017-10135: Fix PKCS#8 implementation timing attack (bsc#1049328).\n- CVE-2017-10176: Fix incorrect handling of certain EC points (bsc#1049329).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10111: Fix checks in LambdaFormEditor (bsc#1049322).\n- CVE-2017-10243: Fix unspecified vulnerability in subcomponent JAX-WS (bsc#1049332).\n- CVE-2017-10125: Fix unspecified vulnerability in subcomponent deployment (bsc#1049327).\n- CVE-2017-10114: Fix unspecified vulnerability in subcomponent JavaFX (bsc#1049323).\n- CVE-2017-10105: Fix unspecified vulnerability in subcomponent deployment (bsc#1049317).\n- CVE-2017-10086: Fix unspecified in subcomponent JavaFX (bsc#1049310).\n- CVE-2017-10198: Fix incorrect enforcement of certificate path restrictions (bsc#1049331).\n- CVE-2017-10193: Fix incorrect key size constraint check (bsc#1049330).\n\nBug fixes:\n\n- Drop Exec Shield workaround to fix crashes on recent kernels, where Exec Shield is gone (bsc#1052318).\n","status":"published","published":"2018-01-03T16:37:47Z","modified":"2026-02-04T02:33:12.020102Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0061-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\n- Security update to version 7.0.10.15 (bsc#1070162):\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2016-10165 CVE-2017-10355\n    CVE-2017-10357 CVE-2017-10348 CVE-2017-10349 CVE-2017-10347\n    CVE-2017-10350 CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2018-01-10T07:43:57Z","modified":"2026-02-04T04:32:54.191954Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1815-1","title":"Security update for zlib","description":"\nThis update brings zlib to 1.2.7, bringing bugfixes and speedups.\n\nIt also reduces a buildtime issue with clamav 0.100 which caused hangs\non 32bit platforms. (bsc#1095016)\n  ","status":"published","published":"2018-06-26T07:37:10Z","modified":"2026-02-04T03:51:20.104593Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-4246-1","title":"zlib vulnerabilities","description":"\nIt was discovered that zlib incorrectly handled pointer arithmetic. An attacker\ncould use this issue to cause zlib to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841)\n\nIt was discovered that zlib incorrectly handled vectors involving left shifts of\nnegative integers. An attacker could use this issue to cause zlib to\ncrash, resulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2016-9842)\n\nIt was discovered that zlib incorrectly handled vectors involving big-endian CRC\ncalculation. An attacker could use this issue to cause zlib to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2016-9843)\n","status":"published","published":"2020-01-22T19:00:08Z","modified":"2026-04-27T15:32:48.957831Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4292-1","title":"rsync vulnerabilities","description":"It was discovered that rsync incorrectly handled pointer arithmetic in zlib.\nAn attacker could use this issue to cause rsync to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2016-9840,\nCVE-2016-9841)\n\nIt was discovered that rsync incorrectly handled vectors involving left shifts\nof negative integers in zlib. An attacker could use this issue to cause rsync\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2016-9842)\n\nIt was discovered that rsync incorrectly handled vectors involving big-endian\nCRC calculation in zlib. An attacker could use this issue to cause rsync to\ncrash, resulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2016-9843)\n","status":"published","published":"2020-02-25T01:11:35Z","modified":"2026-04-27T15:35:21.258079Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-6736-1","title":"klibc vulnerabilities","description":"It was discovered that zlib, vendored in klibc, incorrectly handled pointer\narithmetic. An attacker could use this issue to cause klibc to crash or to\npossibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841)\n\nDanilo Ramos discovered that zlib, vendored in klibc, incorrectly handled\nmemory when performing certain deflating operations. An attacker could use\nthis issue to cause klibc to crash or to possibly execute arbitrary code.\n(CVE-2018-25032)\n\nEvgeny Legerov discovered that zlib, vendored in klibc, incorrectly handled\nmemory when performing certain inflate operations. An attacker could use\nthis issue to cause klibc to crash or to possibly execute arbitrary code.\n(CVE-2022-37434)\n","status":"published","published":"2024-04-16T11:43:39Z","modified":"2026-06-29T13:51:09.00121012Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6736-2","title":"klibc vulnerabilities","description":"USN-6736-1 fixed vulnerabilities in klibc. This update provides the\ncorresponding updates for Ubuntu 24.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that zlib, vendored in klibc, incorrectly handled pointer\n arithmetic. An attacker could use this issue to cause klibc to crash or to\n possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841)\n \n Danilo Ramos discovered that zlib, vendored in klibc, incorrectly handled\n memory when performing certain deflating operations. An attacker could use\n this issue to cause klibc to crash or to possibly execute arbitrary code.\n (CVE-2018-25032)\n \n Evgeny Legerov discovered that zlib, vendored in klibc, incorrectly handled\n memory when performing certain inflate operations. An attacker could use\n this issue to cause klibc to crash or to possibly execute arbitrary code.\n (CVE-2022-37434)\n","status":"published","published":"2024-05-23T09:28:52Z","modified":"2026-04-27T17:17:25.161671844Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}