{"id":"CVE-2017-3289","aliases":["DLA-821-1","DSA-3782-1","EUVD-2017-12410","GHSA-9wpw-6vg5-7w9g","MGASA-2017-0041","RHSA-2017:0175","RHSA-2017:0176","RHSA-2017:0180","RHSA-2017:0263","RHSA-2017:0269","RHSA-2017:0336","RHSA-2017:0337","RHSA-2017:1216","SUSE-SU-2017:0346-1","SUSE-SU-2017:0460-1","SUSE-SU-2017:0490-1","SUSE-SU-2017:1400-1","UBUNTU-CVE-2017-3289","USN-3179-1","USN-3194-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","severity":{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02463,"percentile":0.84569,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-01-19T00:00:00Z","modified":"2026-10-09T10:01:21Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","fixed_in":["7u121-2.6.8-1ubuntu0.14.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","fixed_in":["8u121-b13-0ubuntu1.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u121-2.6.8-2~deb7u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u13-2.3.6-1","7u15-2.3.7-1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6~deb7u1","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":12},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u121-2.6.8-2~deb8u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6+deb8u1","7u85-2.6.1-6~deb7u1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":12},{"source":"osv","ecosystem":"Mageia:5","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-1.b14.1.mga5"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:5","package":"copy-jdk-configs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0-1.mga5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el5_11"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-1jpp.1.el7_3"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-0.b13.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el6_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.4.0-1jpp.1.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el5_11"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el6_8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.131-2.6.9.0.el7_3"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.10.1-1jpp.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.121-20.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr4.0-23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.131-39.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.141-42.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u121-2.6.8-1ubuntu0.14.04.3"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u121-b13-0ubuntu1.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u121-b13-0ubuntu1.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u121-2.6.8-1ubuntu0.14.04.3"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"oracle","product":"java se"},{"vendor":"oracle","product":"java se embedded"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3782","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0176.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201701-65","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0180.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securitytracker.com/id/1037637","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201707-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0175.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/95525","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0263.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20170119-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0269.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0337.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0336.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3289","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20170119-0001"},{"url":"https://github.com/advisories/GHSA-9wpw-6vg5-7w9g"},{"url":"https://advisories.mageia.org/MGASA-2017-0041.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20165","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2017-0180.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0175","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA","tags":["article","report"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u121-relnotes-3315208.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414164","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0175.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5552","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3253","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3253","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3261","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3262","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3262","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3262","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3272","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3272","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3272","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3289","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0176","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_131","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0176.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0180","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0180.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0263","tags":["advisory"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0263.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0269","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0269.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0336","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0336.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2548661","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1940","tags":["article"]},{"url":"https://sweet32.info/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0337","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0337.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328059","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324044","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1216.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0264","tags":["advisory"]},{"url":"http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_April_2016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0376","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0376","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0686","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3427","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3449","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3511","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5542","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5556","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5573","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5597","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170346-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1020905","tags":["report"]},{"url":"https://bugzilla.suse.com/1022053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1024218","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3259","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170490-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171400-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1034849","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-3289","tags":["report"]},{"url":"http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3432537.xml","tags":["report"]},{"url":"http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/02a3d0dcbedd","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3179-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3194-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-2183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-3272","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-3289","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-10-08T20:37:04.176Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12410","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-10-08T20:37:04Z","updated_at":"2026-11-03T00:27:43.911558Z"}],"ghsa":[{"id":"GHSA-9wpw-6vg5-7w9g","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","status":"published","published":"2022-05-14T03:54:31Z","modified":"2025-04-20T03:32:48Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:01:40.176288Z"}],"nvd":[{"id":"CVE-2017-3289","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","status":"published","published":"2017-01-27T22:59:03.85Z","modified":"2026-06-17T01:17:56.377Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:42.372487Z"}],"osv":[{"id":"RHSA-2017:0175","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-29T17:07:53Z","modified":"2026-06-29T10:14:53Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0176","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-29T17:08:00Z","modified":"2026-06-29T10:14:54Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0180","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-29T17:07:37Z","modified":"2026-06-29T10:14:55Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0263","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-29T17:07:03Z","modified":"2026-06-29T10:15:08Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0269","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-29T17:07:46Z","modified":"2026-06-29T10:15:08Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0336","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-29T17:07:15Z","modified":"2026-10-09T10:01:18Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0337","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-29T17:07:21Z","modified":"2026-10-09T10:01:19Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1216","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-29T17:07:08Z","modified":"2026-10-09T10:01:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-3289","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).","status":"published","published":"2017-01-19T00:00:00Z","modified":"2026-02-04T02:40:45.986504Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-821-1","title":"openjdk-7 - security update","status":"published","published":"2017-02-11T00:00:00Z","modified":"2026-03-09T02:10:38.65074Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3782-1","title":"openjdk-7 - security update","status":"published","published":"2017-02-08T00:00:00Z","modified":"2026-03-09T01:23:27.341456Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0041","title":"Updated java-1.8.0-openjdk packages fix security vulnerabilities","description":"It was discovered that the RMI registry and DCG implementations in the\nRMI component of OpenJDK performed deserialization of untrusted inputs.\nA remote attacker could possibly use this flaw to execute arbitrary code\nwith the privileges of RMI registry or a Java RMI application\n(CVE-2017-3241).\n\nThis issue was addressed by introducing whitelists of classes that can\nbe deserialized by RMI registry or DCG. These whitelists can be\ncustomized using the newly introduced sun.rmi.registry.registryFilter\nand sun.rmi.transport.dgcFilter security properties.\n\nMultiple flaws were discovered in the Libraries and Hotspot components\nin OpenJDK. An untrusted Java application or applet could use these\nflaws to completely bypass Java sandbox restrictions (CVE-2017-3272,\nCVE-2017-3289).\n\nA covert timing channel flaw was found in the DSA implementation in the\nLibraries component of OpenJDK. A remote attacker could possibly use\nthis flaw to extract certain information about the used key via a timing\nside channel (CVE-2016-5548).\n\nIt was discovered that the Libraries component of OpenJDK accepted ECSDA\nsignatures using non-canonical DER encoding. This could cause a Java\napplication to accept signature in an incorrect format not accepted by\nother cryptographic tools (CVE-2016-5546).\n\nIt was discovered that the 2D component of OpenJDK performed parsing of\niTXt and zTXt PNG image chunks even when configured to ignore metadata.\nAn attacker able to make a Java application parse a specially crafted\nPNG image could cause the application to consume an excessive amount of\nmemory (CVE-2017-3253).\n\nIt was discovered that the Libraries component of OpenJDK did not\nvalidate the length of the object identifier read from the DER input\nbefore allocating memory to store the OID. An attacker able to make a\nJava application decode a specially crafted DER input could cause the\napplication to consume an excessive amount of memory (CVE-2016-5547).\n\nIt was discovered that the JAAS component of OpenJDK did not use the\ncorrect way to extract user DN from the result of the user search LDAP\nquery. A specially crafted user LDAP entry could cause the application\nto use an incorrect DN (CVE-2017-3252).\n\nIt was discovered that the Networking component of OpenJDK failed to\nproperly parse user info from the URL. A remote attacker could cause a\nJava application to incorrectly parse an attacker supplied URL and\ninterpret it differently from other applications processing the same URL\n(CVE-2016-5552).\n\nMultiple flaws were found in the Networking components in OpenJDK. An\nuntrusted Java application or applet could use these flaws to bypass\ncertain Java sandbox restrictions (CVE-2017-3261, CVE-2017-3231).\n\nA flaw was found in the way the DES/3DES cipher was used as part of the\nTLS/SSL protocol. A man-in-the-middle attacker could use this flaw to\nrecover some plaintext data by capturing large amounts of encrypted\ntraffic between TLS/SSL server and client if the communication used a\nDES/3DES based ciphersuite (CVE-2016-2183).\n\nThis update mitigates the CVE-2016-2183 issue by adding 3DES cipher\nsuites to the list of legacy algorithms (defined using the\njdk.tls.legacyAlgorithms security property) so they are only used if\nconnecting TLS/SSL client and server do not share any other non-legacy\ncipher suite.\n","status":"published","published":"2017-02-05T20:42:41Z","modified":"2026-04-16T06:26:20.914473386Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:0346-1","title":"Security update for java-1_8_0-openjdk","description":"\nThis update for java-1_8_0-openjdk fixes the following issues:\nOracle Critical Patch Update of January 2017 (bsc#1020905)\nUpgrade to version jdk8u121 (icedtea 3.3.0):\n - S8138725: Add options for Javadoc generation\n - S8140353: Improve signature checking\n - S8151934, CVE-2017-3231: Resolve class resolution\n - S8156804, CVE-2017-3241: Better constraint checking\n - S8158406: Limited Parameter Processing\n - S8158997: JNDI Protocols Switch\n - S8159507: RuntimeVisibleAnnotation validation\n - S8161218: Better bytecode loading\n - S8161743, CVE-2017-3252: Provide proper login context\n - S8162577: Standardize logging levels\n - S8162973: Better component components\n - S8164143, CVE-2017-3260: Improve components for menu items\n - S8164147, CVE-2017-3261: Improve streaming socket output\n - S8165071, CVE-2016-2183: Expand TLS support\n - S8165344, CVE-2017-3272: Update concurrency support\n - S8166988, CVE-2017-3253: Improve image processing performance\n - S8167104, CVE-2017-3289: Additional class construction refinements\n - S8167223, CVE-2016-5552: URL handling improvements\n - S8168705, CVE-2016-5547: Better ObjectIdentifier validation\n - S8168714, CVE-2016-5546: Tighten ECDSA validation\n - S8168728, CVE-2016-5548: DSA signing improvements\n - S8168724, CVE-2016-5549: ECDSA signing improvements\n","status":"published","published":"2017-01-31T16:25:20Z","modified":"2026-02-04T03:52:29.854454Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0460-1","title":"Security update for java-1_8_0-ibm","description":"\nThis update for java-1_8_0-ibm to version 8.0-4.0 fixes a lot of security issues (bsc#1024218):\n\nFollowing CVEs are fixed:\n  CVE-2016-5552 CVE-2017-3231 CVE-2017-3241 CVE-2017-3253 CVE-2017-3259\n  CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 CVE-2016-2183 CVE-2016-5547\n  CVE-2016-5548 CVE-2016-5549 CVE-2017-3252\n\nMore information can be found on: https://developer.ibm.com/javasdk/support/security-vulnerabilities/\n","status":"published","published":"2017-02-14T15:30:23Z","modified":"2026-02-04T03:57:43.622768Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0490-1","title":"Security update for java-1_7_0-openjdk","description":"\nThis update for java-1_7_0-openjdk fixes the following issues:\n\n- Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 (bsc#1020905):\n  * Security Fixes\n    - S8138725: Add options for Javadoc generation\n    - S8140353: Improve signature checking\n    - S8151934, CVE-2017-3231: Resolve class resolution\n    - S8156804, CVE-2017-3241: Better constraint checking\n    - S8158406: Limited Parameter Processing\n    - S8158997: JNDI Protocols Switch\n    - S8159507: RuntimeVisibleAnnotation validation\n    - S8161218: Better bytecode loading\n    - S8161743, CVE-2017-3252: Provide proper login context\n    - S8162577: Standardize logging levels\n    - S8162973: Better component components\n    - S8164143, CVE-2017-3260: Improve components for menu items\n    - S8164147, CVE-2017-3261: Improve streaming socket output\n    - S8165071, CVE-2016-2183: Expand TLS support\n    - S8165344, CVE-2017-3272: Update concurrency support\n    - S8166988, CVE-2017-3253: Improve image processing performance\n    - S8167104, CVE-2017-3289: Additional class construction refinements\n    - S8167223, CVE-2016-5552: URL handling improvements\n    - S8168705, CVE-2016-5547: Better ObjectIdentifier validation\n    - S8168714, CVE-2016-5546: Tighten ECDSA validation\n    - S8168728, CVE-2016-5548: DSA signing improvments\n    - S8168724, CVE-2016-5549: ECDSA signing improvments\n    - S6253144: Long narrowing conversion should describe the algorithm used and implied 'risks'\n    - S6328537: Improve javadocs for Socket class by adding references to SocketOptions\n    - S6978886: javadoc shows stacktrace after print error resulting from disk full\n    - S6995421: Eliminate the static dependency to sun.security.ec.ECKeyFactory\n    - S6996372: synchronizing handshaking hash\n    - S7027045: (doc) java/awt/Window.java has several typos in javadoc\n    - S7054969: Null-check-in-finally pattern in java/security documentation\n    - S7072353: JNDI libraries do not build with javac -Xlint:all -Werror\n    - S7075563: Broken link in 'javax.swing.SwingWorker'\n    - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11\n    - S7088502: Security libraries don't build with javac -Werror\n    - S7092447: Clarify the default locale used in each locale sensitive operation\n    - S7093640: Enable client-side TLS 1.2 by default\n    - S7103570: AtomicIntegerFieldUpdater does not work when SecurityManager is installed\n    - S7117360: Warnings in java.util.concurrent.atomic package\n    - S7117465: Warning cleanup for IMF classes\n    - S7187144: JavaDoc for ScriptEngineFactory.getProgram() contains an error\n    - S8000418: javadoc should used a standard 'generated by javadoc' string\n    - S8000666: javadoc should write directly to Writer instead of composing strings\n    - S8000673: remove dead code from HtmlWriter and subtypes\n    - S8000970: break out auxiliary classes that will prevent multi-core compilation of the JDK\n    - S8001669: javadoc internal DocletAbortException should set cause when appropriate\n    - S8008949: javadoc stopped copying doc-files\n    - S8011402: Move blacklisting certificate logic from hard code to data\n    - S8011547: Update XML Signature implementation to Apache Santuario 1.5.4\n    - S8012288: XML DSig API allows wrong tag names and extra elements in SignedInfo\n    - S8016217: More javadoc warnings\n    - S8017325: Cleanup of the javadoc \u003ccode\u003e tag in java.security.cert\n    - S8017326: Cleanup of the javadoc \u003ccode\u003e tag in java.security.spec\n    - S8019772: Fix doclint issues in javax.crypto and javax.security subpackages\n    - S8020557: javadoc cleanup in javax.security\n    - S8020688: Broken links in documentation at http://docs.oracle.com/javase/6/docs/api/index.\n    - S8021108: Clean up doclint warnings and errors in java.text package\n    - S8021417: Fix doclint issues in java.util.concurrent\n    - S8021833: javadoc cleanup in java.net\n    - S8022120: JCK test api/javax_xml/crypto/dsig/TransformService/index_ParamMethods fails\n    - S8022175: Fix doclint warnings in javax.print\n    - S8022406: Fix doclint issues in java.beans\n    - S8022746: List of spelling errors in API doc\n    - S8024779: [macosx] SwingNode crashes on exit\n    - S8025085: [javadoc] some errors in javax/swing\n    - S8025218: [javadoc] some errors in java/awt classes\n    - S8025249: [javadoc] fix some javadoc errors in javax/swing/\n    - S8025409: Fix javadoc comments errors and warning reported by doclint report\n    - S8026021: more fix of javadoc errors and warnings reported by doclint, see the description\n    - S8037099: [macosx] Remove all references to GC from native OBJ-C code\n    - S8038184: XMLSignature throws StringIndexOutOfBoundsException if ID attribute value is empty String\n    - S8038349: Signing XML with DSA throws Exception when key is larger than 1024 bits\n    - S8049244: XML Signature performance issue caused by unbuffered signature data\n    - S8049432: New tests for TLS property jdk.tls.client.protocols\n    - S8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio\n    - S8059212: Modify regression tests so that they do not just fail if no cardreader found\n    - S8068279: (typo in the spec) javax.script.ScriptEngineFactory.getLanguageName\n    - S8068491: Update the protocol for references of docs.oracle.com to HTTPS.\n    - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs to be updated for JDK-8061210\n    - S8076369: Introduce the jdk.tls.client.protocols system property for JDK 7u\n    - S8139565: Restrict certificates with DSA keys less than 1024 bits\n    - S8140422: Add mechanism to allow non default root CAs to be not subject to algorithm restrictions\n    - S8140587: Atomic*FieldUpdaters should use Class.isInstance instead of direct class check\n    - S8143959: Certificates requiring blacklisting\n    - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks\n    - S8148516: Improve the default strength of EC in JDK\n    - S8149029: Secure validation of XML based digital signature always enabled when checking wrapping attacks\n    - S8151893: Add security property to configure XML Signature secure validation mode\n    - S8155760: Implement Serialization Filtering\n    - S8156802: Better constraint checking\n    - S8161228: URL objects with custom protocol handlers have port changed after deserializing\n    - S8161571: Verifying ECDSA signatures permits trailing bytes\n    - S8163304: jarsigner -verbose -verify should print the algorithms used to sign the jar\n    - S8164908: ReflectionFactory support for IIOP and custom serialization\n    - S8165230: RMIConnection addNotificationListeners failing with specific inputs\n    - S8166393: disabledAlgorithms property should not be strictly parsed\n    - S8166591: [macos 10.12] Trackpad scrolling of text on OS X 10.12 Sierra is very fast (Trackpad, Retina only)\n    - S8166739: Improve extensibility of ObjectInputFilter information passed to the filter\n    - S8166875: (tz) Support tzdata2016g\n    - S8166878: Connection reset during TLS handshake\n    - S8167356: Follow up fix for jdk8 backport of 8164143. Changes for CMenuComponent.m were missed\n    - S8167459: Add debug output for indicating if a chosen ciphersuite was legacy\n    - S8167472: Chrome interop regression with JDK-8148516\n    - S8167591: Add MD5 to signed JAR restrictions\n    - S8168861: AnchorCertificates uses hardcoded password for cacerts keystore\n    - S8168993: JDK8u121 L10n resource file update\n    - S8169191: (tz) Support tzdata2016i\n    - S8169688: Backout (remove) MD5 from jdk.jar.disabledAlgorithms for January CPU\n    - S8169911: Enhanced tests for jarsigner -verbose -verify after JDK-8163304\n    - S8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property\n    - S8170268: 8u121 L10n resource file update - msgdrop 20\n    - S8173622: Backport of 7180907 is incomplete\n    - S8173849: Fix use of java.util.Base64 in test cases\n    - S8173854: [TEST] Update DHEKeySizing test case following 8076328 \u0026 8081760\n    - CVE-2017-3259 Vulnerability allows unauthenticated attacker with network access via multiple protocols to\n      compromise Java SE.\n  * Backports\n    - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on __APPLE__and _LLP64 systems.\n    - S8000351, PR3316, RH1390708: Tenuring threshold should be unsigned\n    - S8153711, PR3315, RH1284948: [REDO] GlobalRefs never deleted when processing invokeMethod command\n    - S8170888, PR3316, RH1390708: [linux] support for cgroup memory limits in container (ie Docker) environments\n  * Bug fixes\n    - PR3318: Replace 'infinality' with 'improved font rendering' (--enable-improved-font-rendering)\n    - PR3318: Fix compatibility with vanilla Fontconfig\n    - PR3318: Fix glyph y advance\n    - PR3318: Always round glyph advance in 26.6 space\n    - PR3318: Simplify glyph advance handling\n    - PR3324: Fix NSS_LIBDIR substitution in make_generic_profile.sh broken by PR1989\n  * AArch64 port\n    - S8165673, PR3320: AArch64: Fix JNI floating point argument handling\n","status":"published","published":"2017-02-17T09:59:41Z","modified":"2026-02-04T03:53:14.14153Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1400-1","title":"Security update for java-1_7_0-openjdk","description":"\nThis update for java-1_7_0-openjdk fixes the following issues:\n\n- Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849)\n* Security fixes\n    - S8163520, CVE-2017-3509: Reuse cache entries\n    - S8163528, CVE-2017-3511: Better library loading\n    - S8165626, CVE-2017-3512: Improved window framing\n    - S8167110, CVE-2017-3514: Windows peering issue\n    - S8169011, CVE-2017-3526: Resizing XML parse trees\n    - S8170222, CVE-2017-3533: Better transfers of files\n    - S8171121, CVE-2017-3539: Enhancing jar checking\n    - S8171533, CVE-2017-3544: Better email transfer\n    - S8172299: Improve class processing\n  * New features\n    - PR3347: jstack.stp should support AArch64\n  * Import of OpenJDK 7 u141 build 0\n    - S4717864: setFont() does not update Fonts of Menus already on\n      screen\n    - S6474807: (smartcardio) CardTerminal.connect() throws\n      CardException instead of CardNotPresentException\n    - S6518907: cleanup IA64 specific code in Hotspot\n    - S6869327: Add new C2 flag to keep safepoints in counted loops.\n    - S7112912: Message 'Error occurred during initialization of\n      VM' on boxes with lots of RAM\n    - S7124213: [macosx] pack() does ignore size of a component;\n      doesn't on the other platforms\n    - S7124219: [macosx] Unable to draw images to fullscreen\n    - S7124552: [macosx] NullPointerException in getBufferStrategy()\n    - S7148275: [macosx] setIconImages() not working correctly\n      (distorted icon when minimized)\n    - S7154841: [macosx] Popups appear behind taskbar\n    - S7155957:\n      closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java\n      hangs on win 64 bit with jdk8\n    - S7160627: [macosx] TextArea has wrong initial size\n    - S7167293: FtpURLConnection connection leak on\n      FileNotFoundException\n    - S7168851: [macosx] Netbeans crashes in\n      CImage.nativeCreateNSImageFromArray\n    - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed,\n      compile error\n    - S8005255: [macosx] Cleanup warnings in sun.lwawt\n    - S8006088: Incompatible heap size flags accepted by VM\n    - S8007295: Reduce number of warnings in awt classes\n    - S8010722: assert: failed: heap size is too big for compressed\n      oops\n    - S8011059: [macosx] Support automatic @2x images loading on\n      Mac OS X\n    - S8014058: Regression tests for 8006088\n    - S8014489:\n      tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags\n      jtreg tests invoke wrong class\n    - S8016302: Change type of the number of GC workers to unsigned\n      int (2)\n    - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does\n      not compile.\n    - S8024669: Native OOME when allocating after changes to\n      maximum heap supporting Coops sizing on sparcv9\n    - S8024926: [macosx] AquaIcon HiDPI support\n    - S8025974: l10n for policytool\n    - S8027025: [macosx] getLocationOnScreen returns 0 if parent\n      invisible\n    - S8028212: Custom cursor HiDPI support\n    - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck\n      optimization.\n    - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't\n      rendered in high resolution on Retina\n    - S8033534: [macosx] Get MultiResolution image from native\n      system\n    - S8033786: White flashing when opening Dialogs and Menus using\n      Nimbus with dark background\n    - S8035568: [macosx] Cursor management unification\n    - S8041734: JFrame in full screen mode leaves empty workspace\n      after close\n    - S8059803: Update use of GetVersionEx to get correct Windows\n      version in hs_err files\n    - S8066504: GetVersionEx in\n      java.base/windows/native/libjava/java_props_md.c might not\n      get correct Windows version 0\n    - S8079595: Resizing dialog which is JWindow parent makes JVM\n      crash\n    - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump\n      to parent frame on focus\n    - S8130769: The new menu can't be shown on the menubar after\n      clicking the 'Add' button.\n    - S8133357: 8u65 l10n resource file translation update\n    - S8146602:\n      jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test\n      fails with NullPointerException\n    - S8147842: IME Composition Window is displayed at incorrect\n      location\n    - S8147910: Cache initial active_processor_count\n    - S8150490: Update OS detection code to recognize Windows\n      Server 2016\n    - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is\n      enabled\n    - S8161195: Regression:\n      closed/javax/swing/text/FlowView/LayoutTest.java\n    - S8161993: G1 crashes if active_processor_count changes during\n      startup\n    - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'\n    - S8162876: [TEST_BUG]\n      sun/net/www/protocol/http/HttpInputStream.java fails\n      intermittently\n    - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java\n      failed with 'Error while cleaning up threads after test'\n    - S8167179: Make XSL generated namespace prefixes local to\n      transformation process\n    - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections\n    - S8169589: [macosx] Activating a JDialog puts to back another\n      dialog\n    - S8170307: Stack size option -Xss is ignored\n    - S8170316: (tz) Support tzdata2016j\n    - S8170814: Reuse cache entries (part II)\n    - S8171388: Update JNDI Thread contexts\n    - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with\n      error: The bitwise mask Frame.ICONIFIED is not setwhen the\n       frame is in ICONIFIED state\n    - S8171952: [macosx]\n      AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog\n      test fails as DummyButton on Dialog did not gain focus when\n      clicked.\n    - S8173931: 8u131 L10n resource file update\n    - S8174844: Incorrect GPL header causes RE script to miss swap\n      to commercial header for licensee source bundle\n    - S8175087: [bsd] Fix build after '8024900: PPC64: Enable new\n      build on AIX (jdk part)'\n    - S8175163: [bsd] Fix build after '8005629: javac warnings\n      compiling java.awt.EventDispatchThread...'\n    - S8176044: (tz) Support tzdata2017a\n  * Import of OpenJDK 7 u141 build 1\n    - S8043723: max_heap_for_compressed_oops() declared with\n      size_t, but defined with uintx\n  * Import of OpenJDK 7 u141 build 2\n    - S8011123: serialVersionUID of\n      java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82\n  * Backports\n    - S6515172, PR3362: Runtime.availableProcessors() ignores Linux\n      taskset command\n    - S8022284, PR3209: Hide internal data structure in PhaseCFG\n    - S8023003, PR3209: Cleanup the public interface to PhaseCFG\n    - S8023691, PR3209: Create interface for nodes in class Block\n    - S8023988, PR3209: Move local scheduling of nodes to the CFG\n      creation and code motion phase (PhaseCFG)\n    - S8043780, PR3369: Use open(O_CLOEXEC) instead of\n      fcntl(FD_CLOEXEC)\n    - S8157306, PR3209: Random infrequent null pointer exceptions\n      in javac\n    - S8173783, PR3329: IllegalArgumentException:\n      jdk.tls.namedGroups\n    - S8173941, PR3330: SA does not work if executable is DSO\n    - S8174729, PR3361: Race Condition in\n      java.lang.reflect.WeakCache\n  * Bug fixes\n    - PR3349: Architectures unsupported by SystemTap tapsets throw\n      a parse error\n    - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh\n    - PR3379: Perl should be mandatory\n    - PR3390: javac.in and javah.in should use @PERL@ rather than a\n      hardcoded path\n  * CACAO\n    - PR2732: Raise javadoc memory limits for CACAO again!\n  * AArch64 port\n    - S8177661, PR3367: Correct ad rule output register types from\n      iRegX to iRegXNoSp\n\n- Get ecj.jar path from gcj, use the gcc variant that provides Java\n  to build C code to make sure jni.h is available.\n\n    - S8167104, CVE-2017-3289: Additional class construction\n    - S6253144: Long narrowing conversion should describe the\n    - S6328537: Improve javadocs for Socket class by adding\n    - S6978886: javadoc shows stacktrace after print error\n    - S6995421: Eliminate the static dependency to\n    - S7027045: (doc) java/awt/Window.java has several typos in\n    - S7054969: Null-check-in-finally pattern in java/security\n    - S7072353: JNDI libraries do not build with javac -Xlint:all\n    - S7092447: Clarify the default locale used in each locale\n    - S7103570: AtomicIntegerFieldUpdater does not work when\n    - S7187144: JavaDoc for ScriptEngineFactory.getProgram()\n    - S8000418: javadoc should used a standard 'generated by\n    - S8000666: javadoc should write directly to Writer instead of\n    - S8000970: break out auxiliary classes that will prevent\n    - S8001669: javadoc internal DocletAbortException should set\n    - S8011402: Move blacklisting certificate logic from hard code\n    - S8011547: Update XML Signature implementation to Apache\n    - S8012288: XML DSig API allows wrong tag names and extra\n    - S8017325: Cleanup of the javadoc \u003ccode\u003e tag in\n    - S8017326: Cleanup of the javadoc \u003ccode\u003e tag in\n    - S8019772: Fix doclint issues in javax.crypto and\n    - S8020688: Broken links in documentation at\n    - S8021108: Clean up doclint warnings and errors in java.text\n    - S8022120: JCK test\n      api/javax_xml/crypto/dsig/TransformService/index_ParamMethods\n    - S8025409: Fix javadoc comments errors and warning reported by\n    - S8026021: more fix of javadoc errors and warnings reported by\n    - S8037099: [macosx] Remove all references to GC from native\n    - S8038184: XMLSignature throws StringIndexOutOfBoundsException\n    - S8038349: Signing XML with DSA throws Exception when key is\n    - S8049244: XML Signature performance issue caused by\n    - S8050893: (smartcardio) Invert reset argument in tests in\n    - S8059212: Modify sun/security/smartcardio manual regression\n    - S8068279: (typo in the spec)\n    - S8068491: Update the protocol for references of\n    - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs\n    - S8076369: Introduce the jdk.tls.client.protocols system\n    - S8139565: Restrict certificates with DSA keys less than 1024\n    - S8140422: Add mechanism to allow non default root CAs to be\n    - S8140587: Atomic*FieldUpdaters should use Class.isInstance\n    - S8149029: Secure validation of XML based digital signature\n    - S8151893: Add security property to configure XML Signature\n    - S8161228: URL objects with custom protocol handlers have port\n    - S8163304: jarsigner -verbose -verify should print the\n    - S8164908: ReflectionFactory support for IIOP and custom\n    - S8165230: RMIConnection addNotificationListeners failing with\n    - S8166393: disabledAlgorithms property should not be strictly\n    - S8166591: [macos 10.12] Trackpad scrolling of text on OS X\n    - S8166739: Improve extensibility of ObjectInputFilter\n    - S8167356: Follow up fix for jdk8 backport of 8164143. Changes\n    - S8167459: Add debug output for indicating if a chosen\n    - S8168861: AnchorCertificates uses hardcoded password for\n    - S8169688: Backout (remove) MD5 from\n    - S8169911: Enhanced tests for jarsigner -verbose -verify after\n    - S8170131: Certificates not being blocked by\n    - S8173854: [TEST] Update DHEKeySizing test case following\n    - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on\n    - S8000351, PR3316, RH1390708: Tenuring threshold should be\n    - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak:\n    - S8170888, PR3316, RH1390708: [linux] Experimental support for\n    - PR3318: Replace 'infinality' with 'improved font rendering'\n    - PR3324: Fix NSS_LIBDIR substitution in\n    - S8165673, PR3320: AArch64: Fix JNI floating point argument\n    + S6604109, PR3162:\n- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to\n      directory to be specified\n      versions of IcedTea\n","status":"published","published":"2017-05-24T14:23:03Z","modified":"2026-02-04T03:03:55.523927Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3179-1","title":"openjdk-8 vulnerabilities","description":"Karthik Bhargavan and Gaetan Leurent discovered that the DES and\nTriple DES ciphers were vulnerable to birthday attacks. A remote\nattacker could possibly use this flaw to obtain clear text data from\nlong encrypted sessions. This update moves those algorithms to the\nlegacy algorithm set and causes them to be used only if no non-legacy\nalgorithms can be negotiated. (CVE-2016-2183)\n\nIt was discovered that OpenJDK accepted ECSDA signatures using\nnon-canonical DER encoding. An attacker could use this to modify or\nexpose sensitive data. (CVE-2016-5546)\n\nIt was discovered that OpenJDK did not properly verify object\nidentifier (OID) length when reading Distinguished Encoding Rules\n(DER) records, as used in x.509 certificates and elsewhere. An\nattacker could use this to cause a denial of service (memory\nconsumption). (CVE-2016-5547)\n\nIt was discovered that covert timing channel vulnerabilities existed\nin the DSA and ECDSA implementations in OpenJDK. A remote attacker\ncould use this to expose sensitive information. (CVE-2016-5548,\nCVE-2016-5549)\n\nIt was discovered that the URLStreamHandler class in OpenJDK did not\nproperly parse user information from a URL. A remote attacker could\nuse this to expose sensitive information. (CVE-2016-5552)\n\nIt was discovered that the URLClassLoader class in OpenJDK did not\nproperly check access control context when downloading class files. A\nremote attacker could use this to expose sensitive information.\n(CVE-2017-3231)\n\nIt was discovered that the Remote Method Invocation (RMI)\nimplementation in OpenJDK performed deserialization of untrusted\ninputs. A remote attacker could use this to execute arbitrary\ncode. (CVE-2017-3241)\n\nIt was discovered that the Java Authentication and Authorization\nService (JAAS) component of OpenJDK did not properly perform user\nsearch LDAP queries. An attacker could use a specially constructed\nLDAP entry to expose or modify sensitive information. (CVE-2017-3252)\n\nIt was discovered that the PNGImageReader class in OpenJDK did not\nproperly handle iTXt and zTXt chunks. An attacker could use this to\ncause a denial of service (memory consumption). (CVE-2017-3253)\n\nIt was discovered that integer overflows existed in the\nSocketInputStream and SocketOutputStream classes of OpenJDK. An\nattacker could use this to expose sensitive information.\n(CVE-2017-3261)\n\nIt was discovered that the atomic field updaters in the\njava.util.concurrent.atomic package in OpenJDK did not properly\nrestrict access to protected field members. An attacker could use\nthis to specially craft a Java application or applet that could bypass\nJava sandbox restrictions. (CVE-2017-3272)\n\nIt was discovered that a vulnerability existed in the class\nconstruction implementation in OpenJDK. An attacker could use this\nto specially craft a Java application or applet that could bypass\nJava sandbox restrictions. (CVE-2017-3289)\n","status":"published","published":"2017-01-25T21:05:13Z","modified":"2026-06-01T07:15:22.84175904Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3194-1","title":"openjdk-7 vulnerabilities","description":"Karthik Bhargavan and Gaetan Leurent discovered that the DES and\nTriple DES ciphers were vulnerable to birthday attacks.  A remote\nattacker could possibly use this flaw to obtain clear text data from\nlong encrypted sessions. This update moves those algorithms to the\nlegacy algorithm set and causes them to be used only if no non-legacy\nalgorithms can be negotiated. (CVE-2016-2183)\n\nIt was discovered that OpenJDK accepted ECSDA signatures using\nnon-canonical DER encoding. An attacker could use this to modify or\nexpose sensitive data. (CVE-2016-5546)\n\nIt was discovered that OpenJDK did not properly verify object\nidentifier (OID) length when reading Distinguished Encoding Rules\n(DER) records, as used in x.509 certificates and elsewhere. An\nattacker could use this to cause a denial of service (memory\nconsumption). (CVE-2016-5547)\n\nIt was discovered that covert timing channel vulnerabilities existed\nin the DSA implementations in OpenJDK. A remote attacker could use\nthis to expose sensitive information. (CVE-2016-5548)\n\nIt was discovered that the URLStreamHandler class in OpenJDK did not\nproperly parse user information from a URL. A remote attacker could\nuse this to expose sensitive information. (CVE-2016-5552)\n\nIt was discovered that the URLClassLoader class in OpenJDK did not\nproperly check access control context when downloading class files. A\nremote attacker could use this to expose sensitive information.\n(CVE-2017-3231)\n\nIt was discovered that the Remote Method Invocation (RMI)\nimplementation in OpenJDK performed deserialization of untrusted\ninputs. A remote attacker could use this to execute arbitrary\ncode. (CVE-2017-3241)\n\nIt was discovered that the Java Authentication and Authorization\nService (JAAS) component of OpenJDK did not properly perform user\nsearch LDAP queries. An attacker could use a specially constructed\nLDAP entry to expose or modify sensitive information. (CVE-2017-3252)\n\nIt was discovered that the PNGImageReader class in OpenJDK did not\nproperly handle iTXt and zTXt chunks. An attacker could use this to\ncause a denial of service (memory consumption). (CVE-2017-3253)\n\nIt was discovered that integer overflows existed in the\nSocketInputStream and SocketOutputStream classes of OpenJDK. An\nattacker could use this to expose sensitive information.\n(CVE-2017-3261)\n\nIt was discovered that the atomic field updaters in the\njava.util.concurrent.atomic package in OpenJDK did not properly\nrestrict access to protected field members. An attacker could use\nthis to specially craft a Java application or applet that could bypass\nJava sandbox restrictions. (CVE-2017-3272)\n\nIt was discovered that a vulnerability existed in the class\nconstruction implementation in OpenJDK. An attacker could use this\nto specially craft a Java application or applet that could bypass\nJava sandbox restrictions. (CVE-2017-3289)\n","status":"published","published":"2017-02-09T05:44:32Z","modified":"2026-06-01T07:15:22.939804802Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}