{"id":"CVE-2017-10357","aliases":["DLA-1187-1","DSA-4015-1","DSA-4048-1","EUVD-2017-2004","GHSA-g4h8-pg44-c6f7","MGASA-2017-0460","RHSA-2017:2998","RHSA-2017:2999","RHSA-2017:3046","RHSA-2017:3047","RHSA-2017:3264","RHSA-2017:3267","RHSA-2017:3268","RHSA-2017:3392","RHSA-2017:3453","SUSE-SU-2017:2989-1","SUSE-SU-2017:3235-1","SUSE-SU-2017:3369-1","SUSE-SU-2017:3411-1","SUSE-SU-2017:3440-1","SUSE-SU-2017:3455-1","SUSE-SU-2018:0005-1","SUSE-SU-2018:0061-1","UBUNTU-CVE-2017-10357","USN-3473-1","USN-3497-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03305,"percentile":0.88611,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-10-19T00:00:00Z","modified":"2026-10-09T10:01:28Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","fixed_in":["7u151-2.6.11-2ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","fixed_in":["8u151-b12-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u151-2.6.11-2~deb7u2"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2","7u121-2.6.8-2~deb7u1","7u121-2.6.8-2~deb8u1","7u13-2.3.6-1","7u131-2.6.9-1","7u131-2.6.9-2","7u131-2.6.9-2~deb7u1","7u131-2.6.9-2~deb8u1","7u131-2.6.9-3","7u15-2.3.7-1","7u151-2.6.11-1","7u151-2.6.11-1+deb7u1","7u151-2.6.11-1~deb8u1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6~deb7u1","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":14},{"source":"osv","ecosystem":"Debian:9","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u151-b12-1~deb9u1"}]}],"versions":["8u131-b11-2","8u141-b15-1","8u141-b15-1~deb9u1","8u141-b15-2","8u141-b15-3","8u144-b01-1","8u144-b01-2"],"bundled":14},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u151-2.6.11-2~deb8u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2","7u121-2.6.8-2~deb7u1","7u121-2.6.8-2~deb8u1","7u131-2.6.9-1","7u131-2.6.9-2","7u131-2.6.9-2~deb7u1","7u131-2.6.9-2~deb8u1","7u131-2.6.9-3","7u151-2.6.11-1","7u151-2.6.11-1~deb8u1","7u151-2.6.11-2~deb7u2","7u151-2.6.11-2~deb7u3","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6+deb8u1","7u85-2.6.1-6~deb7u1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"copy-jdk-configs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1.mga5"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-1.b12.1.mga5"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"copy-jdk-configs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-1.b12.1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1.b12.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.1.el6"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.151-1jpp.5.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.3.el6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-1jpp.4.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.171-1jpp.4.el7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.3.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.15-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.161-2.6.12.0.el7_4"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.5-1jpp.1.el6_9"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.151-27.8.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-50.3.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.50-85.5.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.5-30.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-26.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.15-38.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.161-43.7.6"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.15-65.8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u151-2.6.11-2ubuntu0.14.04.1"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1","7u121-2.6.8-1ubuntu0.14.04.3","7u131-2.6.9-0ubuntu0.14.04.1","7u131-2.6.9-0ubuntu0.14.04.2","7u151-2.6.11-0ubuntu1.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u151-b12-0ubuntu0.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u151-b12-0ubuntu0.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u151-2.6.11-2ubuntu0.14.04.1"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1","7u121-2.6.8-1ubuntu0.14.04.3","7u131-2.6.9-0ubuntu0.14.04.1","7u131-2.6.9-0ubuntu0.14.04.2","7u151-2.6.11-0ubuntu1.14.04.1"],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"e-series_santricity_management_plug-ins"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_storage_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services"},{"vendor":"netapp","product":"element_software"},{"vendor":"netapp","product":"oncommand_balance"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_performance_manager"},{"vendor":"netapp","product":"oncommand_shift"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"plug-in_for_symantec_netbackup"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"netapp","product":"storage_replication_adapter_for_clustered_data_ontap"},{"vendor":"netapp","product":"vasa_provider_for_clustered_data_ontap"},{"vendor":"netapp","product":"virtual_storage_console"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"java"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:3047","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201711-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4015","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3267","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2998","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3046","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/101355","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"http://www.securitytracker.com/id/1039596","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link"]},{"url":"https://security.gentoo.org/glsa/201710-31","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3264","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4048","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3453","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3392","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00033.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171019-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2999","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10357","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171019-0001"},{"url":"https://github.com/advisories/GHSA-g4h8-pg44-c6f7"},{"url":"https://advisories.mageia.org/MGASA-2017-0460.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21903","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503169","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2998.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10274","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10281","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10281","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10345","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10346","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10346","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10346","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10347","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10348","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10349","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10349","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10350","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10350","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10350","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10355","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10355","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10356","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10357","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10357","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10388","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA","tags":["article","report"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u151-relnotes-3850493.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503320","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2999.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9840","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9840","tags":["advisory"]},{"url":"https://docs.google.com/document/d/10i1KZS5so8xDqH2rplRa2xet0tyTvvJlLbQQmZIUIKE/edit#heading=h.t13tvnx4loq7","tags":["article"]},{"url":"https://wiki.mozilla.org/images/0/09/Zlib-report.pdf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9841","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9841","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9842","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9842","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10165","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10165","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10293","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10309","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_161","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/eol-135779.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3046.json","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_171","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3047.json","tags":["advisory"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3264.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3267.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3268.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472320","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3392.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10193","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10198","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472667","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3453.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3509","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3533","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3539","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10078","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10087","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10087","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10102","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10105","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10107","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10109","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10109","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10110","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10115","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10243","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172989-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1032647","tags":["report"]},{"url":"https://bugzilla.suse.com/1052009","tags":["report"]},{"url":"https://bugzilla.suse.com/1064069","tags":["report"]},{"url":"https://bugzilla.suse.com/1064070","tags":["report"]},{"url":"https://bugzilla.suse.com/1064071","tags":["report"]},{"url":"https://bugzilla.suse.com/1064072","tags":["report"]},{"url":"https://bugzilla.suse.com/1064073","tags":["report"]},{"url":"https://bugzilla.suse.com/1064075","tags":["report"]},{"url":"https://bugzilla.suse.com/1064077","tags":["report"]},{"url":"https://bugzilla.suse.com/1064078","tags":["report"]},{"url":"https://bugzilla.suse.com/1064079","tags":["report"]},{"url":"https://bugzilla.suse.com/1064080","tags":["report"]},{"url":"https://bugzilla.suse.com/1064081","tags":["report"]},{"url":"https://bugzilla.suse.com/1064082","tags":["report"]},{"url":"https://bugzilla.suse.com/1064083","tags":["report"]},{"url":"https://bugzilla.suse.com/1064084","tags":["report"]},{"url":"https://bugzilla.suse.com/1064085","tags":["report"]},{"url":"https://bugzilla.suse.com/1064086","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173235-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1070162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10293","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173369-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173411-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10309","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173440-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173455-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049305","tags":["report"]},{"url":"https://bugzilla.suse.com/1049306","tags":["report"]},{"url":"https://bugzilla.suse.com/1049307","tags":["report"]},{"url":"https://bugzilla.suse.com/1049309","tags":["report"]},{"url":"https://bugzilla.suse.com/1049310","tags":["report"]},{"url":"https://bugzilla.suse.com/1049311","tags":["report"]},{"url":"https://bugzilla.suse.com/1049312","tags":["report"]},{"url":"https://bugzilla.suse.com/1049313","tags":["report"]},{"url":"https://bugzilla.suse.com/1049314","tags":["report"]},{"url":"https://bugzilla.suse.com/1049315","tags":["report"]},{"url":"https://bugzilla.suse.com/1049316","tags":["report"]},{"url":"https://bugzilla.suse.com/1049317","tags":["report"]},{"url":"https://bugzilla.suse.com/1049318","tags":["report"]},{"url":"https://bugzilla.suse.com/1049319","tags":["report"]},{"url":"https://bugzilla.suse.com/1049320","tags":["report"]},{"url":"https://bugzilla.suse.com/1049321","tags":["report"]},{"url":"https://bugzilla.suse.com/1049322","tags":["report"]},{"url":"https://bugzilla.suse.com/1049323","tags":["report"]},{"url":"https://bugzilla.suse.com/1049324","tags":["report"]},{"url":"https://bugzilla.suse.com/1049325","tags":["report"]},{"url":"https://bugzilla.suse.com/1049326","tags":["report"]},{"url":"https://bugzilla.suse.com/1049327","tags":["report"]},{"url":"https://bugzilla.suse.com/1049328","tags":["report"]},{"url":"https://bugzilla.suse.com/1049329","tags":["report"]},{"url":"https://bugzilla.suse.com/1049330","tags":["report"]},{"url":"https://bugzilla.suse.com/1049331","tags":["report"]},{"url":"https://bugzilla.suse.com/1049332","tags":["report"]},{"url":"https://bugzilla.suse.com/1052318","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180061-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-10357","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3473-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3497-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-10274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10388","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-10357","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2017-10-19T17:00:00Z","modified":"2024-10-04T16:48:18.092Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-2004","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2017-10-19T17:00:00Z","modified":"2024-10-04T16:48:18Z","updated_at":"2026-11-03T00:27:51.438588Z"}],"ghsa":[{"id":"GHSA-g4h8-pg44-c6f7","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2022-05-13T01:16:58Z","modified":"2025-04-20T03:48:15Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:01:55.184489Z"}],"nvd":[{"id":"CVE-2017-10357","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2017-10-19T17:29:04.467Z","modified":"2026-06-17T01:00:16.31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:03.426231Z"}],"osv":[{"id":"RHSA-2017:2998","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-13T14:42:04Z","modified":"2026-06-29T10:18:04Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:2999","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-13T14:42:18Z","modified":"2026-10-09T10:01:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3046","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-13T14:42:24Z","modified":"2026-10-09T10:01:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3047","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-13T14:42:29Z","modified":"2026-10-09T10:01:26Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3264","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T14:42:58Z","modified":"2026-06-29T10:18:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3267","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T14:43:03Z","modified":"2026-06-29T10:18:22Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3268","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T14:43:09Z","modified":"2026-06-29T10:18:22Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3392","title":"Red Hat Security Advisory: java-1.7.0-openjdk security and bug fix update","status":"published","published":"2024-09-13T14:42:12Z","modified":"2026-06-29T10:18:26Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2017:3453","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T14:43:02Z","modified":"2026-10-09T10:01:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-10357","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2017-10-19T00:00:00Z","modified":"2026-02-04T03:10:58.264781Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1187-1","title":"openjdk-7 - security update","status":"published","published":"2017-11-23T00:00:00Z","modified":"2026-03-09T01:01:30.605129Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4015-1","title":"openjdk-8 - security update","status":"published","published":"2017-11-02T00:00:00Z","modified":"2026-03-09T01:19:16.122828Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-4048-1","title":"openjdk-7 - security update","status":"published","published":"2017-11-23T00:00:00Z","modified":"2026-03-09T02:09:56.115951Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0460","title":"Updated java-1.8.0-openjdk packages fix security vulnerabilities","description":"Multiple flaws were discovered in the RMI and Hotspot components in\nOpenJDK. An untrusted Java application or applet could use these flaws\nto completely bypass Java sandbox restrictions. (CVE-2017-10285,\nCVE-2017-10346)\n\nIt was discovered that the Kerberos client implementation in the\nLibraries component of OpenJDK used the sname field from the plain text\npart rather than encrypted part of the KDC reply message. A man-in-the-\nmiddle attacker could possibly use this flaw to impersonate Kerberos\nservices to Java applications acting as Kerberos clients.\n(CVE-2017-10388)\n\nIt was discovered that the Security component of OpenJDK generated weak\npassword-based encryption keys used to protect private keys stored in\nkey stores. This made it easier to perform password guessing attacks to\ndecrypt stored keys if an attacker could gain access to a key store.\n(CVE-2017-10356)\n\nA flaw was found in the Smart Card IO component in OpenJDK. An untrusted\nJava application or applet could use this flaw to bypass certain Java\nsandbox restrictions. (CVE-2017-10274)\n\nIt was found that the FtpClient implementation in the Networking\ncomponent of OpenJDK did not set connect and read timeouts by default.\nA malicious FTP server or a man-in-the-middle attacker could use this\nflaw to block execution of a Java application connecting to an FTP\nserver. (CVE-2017-10355)\n\nIt was found that the HttpURLConnection and HttpsURLConnection classes\nin the Networking component of OpenJDK failed to check for newline\ncharacters embedded in URLs. An attacker able to make a Java application\nperform an HTTP request using an attacker provided URL could possibly\ninject additional headers into the request. (CVE-2017-10295)\n\nIt was discovered that multiple classes in the JAXP, Serialization,\nLibraries, and JAX-WS components of OpenJDK did not limit the amount of\nmemory allocated when creating object instances from the serialized\nform. A specially-crafted input could cause a Java application to use an\nexcessive amount of memory when deserialized. (CVE-2017-10349,\nCVE-2017-10357, CVE-2017-10347, CVE-2017-10281, CVE-2017-10345,\nCVE-2017-10348, CVE-2017-10350)\n","status":"published","published":"2017-12-21T18:18:18Z","modified":"2026-04-16T06:24:00.448522786Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:2989-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\n- Update to version jdk8u151 (icedtea 3.6.0)\n\nSecurity issues fixed:\n\n- CVE-2017-10274: Handle smartcard clean up better (bsc#1064071)\n- CVE-2017-10281: Better queuing priorities (bsc#1064072)\n- CVE-2017-10285: Unreferenced references (bsc#1064073)\n- CVE-2017-10295: Better URL connections (bsc#1064075)\n- CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086)\n- CVE-2017-10346: Better invokespecial checks (bsc#1064078)\n- CVE-2017-10350: Better Base Exceptions (bsc#1064082)\n- CVE-2017-10347: Better timezone processing (bsc#1064079)\n- CVE-2017-10349: Better X processing (bsc#1064081)\n- CVE-2017-10345: Better keystore handling (bsc#1064077)\n- CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080)\n- CVE-2017-10357: Process Proxy presentation (bsc#1064085)\n- CVE-2017-10355: More stable connection processing (bsc#1064083)\n- CVE-2017-10356: Update storage implementations (bsc#1064084)\n- CVE-2016-10165: Improve CMS header processing (bsc#1064069)\n- CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade compression library (bsc#1064070)\n\nBug fixes:\n\n- Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs\n","status":"published","published":"2017-11-10T12:10:06Z","modified":"2026-02-04T02:45:00.189511Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3235-1","title":"Security update for java-1_6_0-ibm","description":"This update for java-1_6_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 6.0.16.50 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2017-10355 CVE-2017-10357\n    CVE-2017-10348 CVE-2017-10349 CVE-2017-10347 CVE-2017-10350\n    CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2017-12-07T14:33:20Z","modified":"2026-02-04T03:46:42.034664Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3369-1","title":"Security update for java-1_6_0-ibm","description":"This update for java-1_6_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 6.0.16.50 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2017-10355 CVE-2017-10357\n    CVE-2017-10348 CVE-2017-10349 CVE-2017-10347 CVE-2017-10350\n    CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2017-12-19T07:37:18Z","modified":"2026-02-04T04:09:51.549917Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3411-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nSecurity issues fixed:\n\n- Security update to version 8.0.5.5 (bsc#1070162)\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10309\n    CVE-2017-10356 CVE-2017-10293 CVE-2016-9841  CVE-2016-10165\n    CVE-2017-10355 CVE-2017-10357 CVE-2017-10348 CVE-2017-10349\n    CVE-2017-10347 CVE-2017-10350 CVE-2017-10281 CVE-2017-10295\n    CVE-2017-10345\n","status":"published","published":"2017-12-22T10:08:34Z","modified":"2026-02-04T03:09:58.895291Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3440-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n* CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10348: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10388: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2016-9841:  'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10293: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10345: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10350: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10356: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10357: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10347: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10355: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10285: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10281: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10295: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2017-10346: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n* CVE-2016-10165: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n","status":"published","published":"2017-12-27T09:56:33Z","modified":"2026-02-04T03:09:40.475404Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3455-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\n- Security update to version 7.1.4.15 [bsc#1070162]\n  \n  * CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10348: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10388: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2016-9841:  'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10293: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10345: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10350: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10356: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10357: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10347: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10355: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10285: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10281: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10295: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2017-10346: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n\n  * CVE-2016-10165: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).'\n  \n  ","status":"published","published":"2017-12-29T22:12:17Z","modified":"2026-02-04T03:03:06.001187Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0005-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-10356: Fix issue inside subcomponent Security (bsc#1064084).\n- CVE-2017-10274: Fix issue inside subcomponent Smart Card IO (bsc#1064071).\n- CVE-2017-10281: Fix issue inside subcomponent Serialization (bsc#1064072).\n- CVE-2017-10285: Fix issue inside subcomponent RMI (bsc#1064073).\n- CVE-2017-10295: Fix issue inside subcomponent Networking (bsc#1064075).\n- CVE-2017-10388: Fix issue inside subcomponent Libraries (bsc#1064086).\n- CVE-2017-10346: Fix issue inside subcomponent Hotspot (bsc#1064078).\n- CVE-2017-10350: Fix issue inside subcomponent JAX-WS (bsc#1064082).\n- CVE-2017-10347: Fix issue inside subcomponent Serialization (bsc#1064079).\n- CVE-2017-10349: Fix issue inside subcomponent JAXP (bsc#1064081).\n- CVE-2017-10345: Fix issue inside subcomponent Serialization (bsc#1064077).\n- CVE-2017-10348: Fix issue inside subcomponent Libraries (bsc#1064080).\n- CVE-2017-10357: Fix issue inside subcomponent Serialization (bsc#1064085).\n- CVE-2017-10355: Fix issue inside subcomponent Networking (bsc#1064083).\n- CVE-2017-10102: Fix incorrect handling of references in DGC (bsc#1049316).\n- CVE-2017-10053: Fix reading of unprocessed image data in JPEGImageReader (bsc#1049305).\n- CVE-2017-10067: Fix JAR verifier incorrect handling of missing digest (bsc#1049306).\n- CVE-2017-10081: Fix incorrect bracket processing in function signature handling (bsc#1049309).\n- CVE-2017-10087: Fix insufficient access control checks in ThreadPoolExecutor (bsc#1049311).\n- CVE-2017-10089: Fix insufficient access control checks in ServiceRegistry (bsc#1049312).\n- CVE-2017-10090: Fix insufficient access control checks in AsynchronousChannelGroupImpl (bsc#1049313).\n- CVE-2017-10096: Fix insufficient access control checks in XML transformations (bsc#1049314).\n- CVE-2017-10101: Fix unrestricted access to com.sun.org.apache.xml.internal.resolver (bsc#1049315).\n- CVE-2017-10107: Fix insufficient access control checks in ActivationID (bsc#1049318).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10110: Fix insufficient access control checks in ImageWatched (bsc#1049321).\n- CVE-2017-10108: Fix unbounded memory allocation in BasicAttribute deserialization (bsc#1049319).\n- CVE-2017-10109: Fix unbounded memory allocation in CodeSource deserialization (bsc#1049320).\n- CVE-2017-10115: Fix unspecified vulnerability in subcomponent JCE (bsc#1049324).\n- CVE-2017-10118: Fix ECDSA implementation timing attack (bsc#1049326).\n- CVE-2017-10116: Fix LDAPCertStore following referrals to non-LDAP URL (bsc#1049325).\n- CVE-2017-10135: Fix PKCS#8 implementation timing attack (bsc#1049328).\n- CVE-2017-10176: Fix incorrect handling of certain EC points (bsc#1049329).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307).\n- CVE-2017-10111: Fix checks in LambdaFormEditor (bsc#1049322).\n- CVE-2017-10243: Fix unspecified vulnerability in subcomponent JAX-WS (bsc#1049332).\n- CVE-2017-10125: Fix unspecified vulnerability in subcomponent deployment (bsc#1049327).\n- CVE-2017-10114: Fix unspecified vulnerability in subcomponent JavaFX (bsc#1049323).\n- CVE-2017-10105: Fix unspecified vulnerability in subcomponent deployment (bsc#1049317).\n- CVE-2017-10086: Fix unspecified in subcomponent JavaFX (bsc#1049310).\n- CVE-2017-10198: Fix incorrect enforcement of certificate path restrictions (bsc#1049331).\n- CVE-2017-10193: Fix incorrect key size constraint check (bsc#1049330).\n\nBug fixes:\n\n- Drop Exec Shield workaround to fix crashes on recent kernels, where Exec Shield is gone (bsc#1052318).\n","status":"published","published":"2018-01-03T16:37:47Z","modified":"2026-02-04T02:33:12.020102Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0061-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\n- Security update to version 7.0.10.15 (bsc#1070162):\n  * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356\n    CVE-2017-10293 CVE-2016-9841  CVE-2016-10165 CVE-2017-10355\n    CVE-2017-10357 CVE-2017-10348 CVE-2017-10349 CVE-2017-10347\n    CVE-2017-10350 CVE-2017-10281 CVE-2017-10295 CVE-2017-10345\n","status":"published","published":"2018-01-10T07:43:57Z","modified":"2026-02-04T04:32:54.191954Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3473-1","title":"openjdk-8 vulnerabilities","description":"It was discovered that the Smart Card IO subsystem in OpenJDK did not\nproperly maintain state. An attacker could use this to specially construct\nan untrusted Java application or applet to gain access to a smart card,\nbypassing sandbox restrictions. (CVE-2017-10274)\n\nGaston Traberg discovered that the Serialization component of OpenJDK did\nnot properly limit the amount of memory allocated when performing\ndeserializations. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2017-10281)\n\nIt was discovered that the Remote Method Invocation (RMI) component in\nOpenJDK did not properly handle unreferenced objects. An attacker could use\nthis to specially construct an untrusted Java application or applet that\ncould escape sandbox restrictions. (CVE-2017-10285)\n\nIt was discovered that the HTTPUrlConnection classes in OpenJDK did not\nproperly handle newlines. An attacker could use this to convince a Java\napplication or applet to inject headers into http requests.\n(CVE-2017-10295)\n\nFrancesco Palmarini, Marco Squarcina, Mauro Tempesta, and Riccardo Focardi\ndiscovered that the Serialization component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing objects from\nJava Cryptography Extension KeyStore (JCEKS). An attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2017-10345)\n\nIt was discovered that the Hotspot component of OpenJDK did not properly\nperform loader checks when handling the invokespecial JVM instruction. An\nattacker could use this to specially construct an untrusted Java\napplication or applet that could escape sandbox restrictions.\n(CVE-2017-10346)\n\nGaston Traberg discovered that the Serialization component of OpenJDK did\nnot properly limit the amount of memory allocated when performing\ndeserializations in the SimpleTimeZone class. An attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2017-10347)\n\nIt was discovered that the Serialization component of OpenJDK did not\nproperly limit the amount of memory allocated when performing\ndeserializations. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2017-10348, CVE-2017-10357)\n\nIt was discovered that the JAXP component in OpenJDK did not properly limit\nthe amount of memory allocated when performing deserializations. An\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-10349)\n\nIt was discovered that the JAX-WS component in OpenJDK did not properly\nlimit the amount of memory allocated when performing deserializations. An\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-10350)\n\nIt was discovered that the Networking component of OpenJDK did not properly\nset timeouts on FTP client actions. A remote attacker could use this to\ncause a denial of service (application hang). (CVE-2017-10355)\n\nFrancesco Palmarini, Marco Squarcina, Mauro Tempesta, Riccardo Focardi, and\nTobias Ospelt discovered that the Security component in OpenJDK did not\nsufficiently protect password-based encryption keys in key stores. An\nattacker could use this to expose sensitive information. (CVE-2017-10356)\n\nJeffrey Altman discovered that the Kerberos client implementation in\nOpenJDK incorrectly trusted unauthenticated portions of Kerberos tickets. A\nremote attacker could use this to impersonate trusted network services or\nperform other attacks. (CVE-2017-10388)\n","status":"published","published":"2017-11-08T07:48:39Z","modified":"2026-02-10T04:41:14Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3497-1","title":"openjdk-7 vulnerabilities","description":"It was discovered that the Smart Card IO subsystem in OpenJDK did not\nproperly maintain state. An attacker could use this to specially construct\nan untrusted Java application or applet to gain access to a smart card,\nbypassing sandbox restrictions. (CVE-2017-10274)\n\nGaston Traberg discovered that the Serialization component of OpenJDK did\nnot properly limit the amount of memory allocated when performing\ndeserializations. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2017-10281)\n\nIt was discovered that the Remote Method Invocation (RMI) component in\nOpenJDK did not properly handle unreferenced objects. An attacker could use\nthis to specially construct an untrusted Java application or applet that\ncould escape sandbox restrictions. (CVE-2017-10285)\n\nIt was discovered that the HTTPUrlConnection classes in OpenJDK did not\nproperly handle newlines. An attacker could use this to convince a Java\napplication or applet to inject headers into http requests.\n(CVE-2017-10295)\n\nFrancesco Palmarini, Marco Squarcina, Mauro Tempesta, and Riccardo Focardi\ndiscovered that the Serialization component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing objects from\nJava Cryptography Extension KeyStore (JCEKS). An attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2017-10345)\n\nIt was discovered that the Hotspot component of OpenJDK did not properly\nperform loader checks when handling the invokespecial JVM instruction. An\nattacker could use this to specially construct an untrusted Java\napplication or applet that could escape sandbox restrictions.\n(CVE-2017-10346)\n\nGaston Traberg discovered that the Serialization component of OpenJDK did\nnot properly limit the amount of memory allocated when performing\ndeserializations in the SimpleTimeZone class. An attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2017-10347)\n\nIt was discovered that the Serialization component of OpenJDK did not\nproperly limit the amount of memory allocated when performing\ndeserializations. An attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2017-10348, CVE-2017-10357)\n\nIt was discovered that the JAXP component in OpenJDK did not properly limit\nthe amount of memory allocated when performing deserializations. An\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-10349)\n\nIt was discovered that the JAX-WS component in OpenJDK did not properly\nlimit the amount of memory allocated when performing deserializations. An\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-10350)\n\nIt was discovered that the Networking component of OpenJDK did not properly\nset timeouts on FTP client actions. A remote attacker could use this to\ncause a denial of service (application hang). (CVE-2017-10355)\n\nFrancesco Palmarini, Marco Squarcina, Mauro Tempesta, Riccardo Focardi, and\nTobias Ospelt discovered that the Security component in OpenJDK did not\nsufficiently protect password-based encryption keys in key stores. An\nattacker could use this to expose sensitive information. (CVE-2017-10356)\n\nJeffrey Altman discovered that the Kerberos client implementation in\nOpenJDK incorrectly trusted unauthenticated portions of Kerberos tickets. A\nremote attacker could use this to impersonate trusted network services or\nperform other attacks. (CVE-2017-10388)\n","status":"published","published":"2017-11-29T07:41:06Z","modified":"2026-02-10T04:41:15Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}