{"id":"CVE-2018-11212","aliases":["DEBIAN-CVE-2018-11212","DLA-1638-1","EUVD-2018-3252","GHSA-m7r9-q69w-q556","MGASA-2019-0071","RHSA-2019:0469","RHSA-2019:0472","RHSA-2019:0473","RHSA-2019:0474","RHSA-2019:0640","RHSA-2019:1238","RHSA-2019:2052","SUSE-SU-2019:0221-1","SUSE-SU-2019:0574-1","SUSE-SU-2019:0585-1","SUSE-SU-2019:0604-1","SUSE-SU-2019:0617-1","SUSE-SU-2019:1219-1","SUSE-SU-2019:1392-1","SUSE-SU-2019:13975-1","SUSE-SU-2019:13978-1","SUSE-SU-2019:2291-1","SUSE-SU-2019:2371-1","UBUNTU-CVE-2018-11212","USN-3706-1","USN-5336-1","USN-5497-1","USN-5497-2","openSUSE-SU-2019:0161-1","openSUSE-SU-2019:0346-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10873-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04558,"percentile":0.91656,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2018-05-16T00:00:00Z","modified":"2026-10-17T12:53:50Z","fixes":[{"ecosystem":"Debian:12","package":"libjpeg-turbo","fixed_in":["1:1.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libjpeg-turbo","fixed_in":["1:1.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libjpeg-turbo","fixed_in":["1:1.4.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libjpeg-turbo","fixed_in":["1.3.0-0ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libjpeg6b","fixed_in":["6b1-4ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg6b","fixed_in":["1:6b2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg9","fixed_in":["1:9b-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.1-12+deb8u1"}]}],"versions":["1:1.3.1-12"],"bundled":5},{"source":"osv","ecosystem":"Mageia:6","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.201-1.b09.2.mga6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.40-1jpp.1.el6_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.30-1jpp.1.el6_10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-webstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.35-3.el8_0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libjpeg-turbo-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libjpeg-turbo-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libjpeg-turbo-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libjpeg-turbo-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.90-8.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.201-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.201-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-3.16.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-38.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.30-30.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.212-27.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.221-43.22.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.40-65.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-26.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-26.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.40-26.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-3.24.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-3.24.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.40-30.54.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-0ubuntu2.1"}]}],"versions":["1.3.0-0ubuntu1","1.3.0-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b1-4ubuntu1+esm1"}]}],"versions":["6b1-3ubuntu1","6b1-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6b2-2ubuntu0.1~esm1"}]}],"versions":["1:6b2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9b-1ubuntu1+esm1"}]}],"versions":["1:9a-2ubuntu1","1:9b-1","1:9b-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9b-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4","1:6b2-4build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-0ubuntu2.1"}]}],"versions":["1.3.0-0ubuntu1","1.3.0-0ubuntu2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-0ubuntu3.1"}]}],"versions":["1.3.0-0ubuntu2","1.4.2-0ubuntu1","1.4.2-0ubuntu2","1.4.2-0ubuntu3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-0ubuntu5.18.04.1"}]}],"versions":["1.5.2-0ubuntu5"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9b-1ubuntu1+esm1"}]}],"versions":["1:9a-2ubuntu1","1:9b-1","1:9b-1ubuntu1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b1-4ubuntu1+esm1"}]}],"versions":["6b1-3ubuntu1","6b1-4ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6b2-2ubuntu0.1~esm1"}]}],"versions":["1:6b2-2"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.201-lp150.2.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.12.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-13-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-15-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.4.0-2.1"}]}],"bundled":48},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"ijg","product":"libjpeg"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"}],"references":[{"url":"http://www.securityfocus.com/bid/106583","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3706-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0474","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3706-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0469","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0473","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0472","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0640","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1238","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2052","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0001/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"http://www.ijg.org/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03958en_us","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/zzyyrr/divide-by-zero-in-libjpeg-9d.git","tags":["x_refsource_MISC","x_transferred","package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11212","tags":["advisory"]},{"url":"https://usn.ubuntu.com/3706-2"},{"url":"https://usn.ubuntu.com/3706-1"},{"url":"https://security.netapp.com/advisory/ntap-20190118-0001"},{"url":"http://www.ijg.org"},{"url":"https://github.com/advisories/GHSA-m7r9-q69w-q556"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11212","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0071.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24293","tags":["report"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html#AppendixJAVA","tags":["advisory","article"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685717","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0469.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11212","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2449","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0472.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0473.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0474.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0640.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704799","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1238.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2684","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2697","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2697","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2697","tags":["advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10245","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687424","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2052.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3616","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11213","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11214","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11813","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14498","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14498","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14498","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190221-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1120431","tags":["report"]},{"url":"https://bugzilla.suse.com/1122293","tags":["report"]},{"url":"https://bugzilla.suse.com/1122299","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190574-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190585-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1122292","tags":["report"]},{"url":"https://bugzilla.suse.com/1128158","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2449","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190604-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190617-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191219-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1132728","tags":["report"]},{"url":"https://bugzilla.suse.com/1132729","tags":["report"]},{"url":"https://bugzilla.suse.com/1132732","tags":["report"]},{"url":"https://bugzilla.suse.com/1133135","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191392-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1134297","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913975-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913978-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141780","tags":["report"]},{"url":"https://bugzilla.suse.com/1141782","tags":["report"]},{"url":"https://bugzilla.suse.com/1141783","tags":["report"]},{"url":"https://bugzilla.suse.com/1141785","tags":["report"]},{"url":"https://bugzilla.suse.com/1141787","tags":["report"]},{"url":"https://bugzilla.suse.com/1141789","tags":["report"]},{"url":"https://bugzilla.suse.com/1147021","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192371-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11212","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3706-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3706-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5497-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5497-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5336-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14153","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ORCDRSEWQ6BJYEU2ZLJO4T4GEPU43V5Y/#ORCDRSEWQ6BJYEU2ZLJO4T4GEPU43V5Y","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDKUXCDPLO7SR6NRODPJR2SF7OTNKJWB/#FDKUXCDPLO7SR6NRODPJR2SF7OTNKJWB","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T17:00:00Z","modified":"2026-10-15T17:20:54.53Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3252","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T17:00:00Z","modified":"2026-10-15T17:20:54Z","updated_at":"2026-11-02T17:00:11.901066Z"}],"ghsa":[{"id":"GHSA-m7r9-q69w-q556","title":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2022-05-13T01:01:02Z","modified":"2026-10-15T18:32:27Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T15:13:36.44286Z"}],"nvd":[{"id":"CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T17:29:00.23Z","modified":"2026-10-15T18:17:07.45Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:04:27.507872Z"}],"osv":[{"id":"CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T17:29:00.23Z","modified":"2026-04-16T06:21:38.960892118Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T17:29:00.23Z","modified":"2026-10-15T21:47:31.758637844Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2019:0469","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T16:55:08Z","modified":"2026-10-16T10:01:14Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0472","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T16:55:02Z","modified":"2026-10-16T10:01:14Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0473","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T16:55:16Z","modified":"2026-10-16T10:01:15Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0474","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-13T16:55:22Z","modified":"2026-10-16T10:01:16Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0640","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T16:55:08Z","modified":"2026-10-16T10:01:16Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1238","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T19:51:35Z","modified":"2026-10-16T10:01:17Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2052","title":"Red Hat Security Advisory: libjpeg-turbo security update","status":"published","published":"2024-09-16T01:57:39Z","modified":"2026-10-16T10:01:18Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-11212","description":"An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.","status":"published","published":"2018-05-16T00:00:00Z","modified":"2026-10-17T12:53:50.741553192Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1638-1","title":"libjpeg-turbo - security update","status":"published","published":"2019-01-22T00:00:00Z","modified":"2026-03-09T01:20:04.563269Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2019-0071","title":"Updated java-1.8.0-openjdk packages fix security vulnerability","description":"Vulnerability in the Java Advanced Management Console component of\nOracle Java SE (subcomponent: Server). The supported version that is\naffected is Java Advanced Management Console: 2.12. Easily exploitable\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Java Advanced Management Console.\nSuccessful attacks require human interaction from a person other than\nthe attacker and while the vulnerability is in Java Advanced Management\nConsole, attacks may significantly impact additional products.\nSuccessful attacks of this vulnerability can result in unauthorized\nupdate, insert or delete access to some of Java Advanced Management\nConsole accessible data as well as unauthorized read access to a subset\nof Java Advanced Management Console accessible data. (CVE-2019-2540)\n\nAn issue was discovered in libjpeg 9a. The alloc_sarray function in\njmemmgr.c allows remote attackers to cause a denial of service\n(divide-by-zero error) via a crafted file. (CVE-2018-11212)\n\nVulnerability in the Java SE component of Oracle Java SE (subcomponent:\nNetworking). Supported versions that are affected are Java SE: 7u201,\n8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Java SE. Successful attacks of this\nvulnerability can result in unauthorized read access to a subset of Java\nSE accessible data. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets (in Java SE 8), that load and run untrusted code\n(e.g., code that comes from the internet) and rely on the Java sandbox\nfor security. This vulnerability can also be exploited by using APIs in\nthe specified Component, e.g., through a web service which supplies data\nto the APIs. (CVE-2019-2426)\n\nVulnerability in the Java SE component of Oracle Java SE (subcomponent:\nDeployment). The supported version that is affected is Java SE: 8u192.\nDifficult to exploit vulnerability allows unauthenticated attacker with\nnetwork access via multiple protocols to compromise Java SE. Successful\nattacks require human interaction from a person other than the attacker.\nSuccessful attacks of this vulnerability can result in unauthorized\nability to cause a partial denial of service (partial DOS) of Java SE.\nNote: This vulnerability applies to Java deployments, typically in\nclients running sandboxed Java Web Start applications or sandboxed Java\napplets (in Java SE 8), that load and run untrusted code (e.g., code\nthat comes from the internet) and rely on the Java sandbox for security.\nThis vulnerability does not apply to Java deployments, typically in\nservers, that load and run only trusted code (e.g., code installed by\nan administrator). (CVE-2019-2449)\n\nVulnerability in the Java SE component of Oracle Java SE (subcomponent:\nLibraries). Supported versions that are affected are Java SE: 7u201,\n8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Java SE. Successful attacks require\nhuman interaction from a person other than the attacker. Successful\nattacks of this vulnerability can result in unauthorized read access to\na subset of Java SE accessible data. Note: This vulnerability applies to\nJava deployments, typically in clients running sandboxed Java Web Start\napplications or sandboxed Java applets (in Java SE 8), that load and run\nuntrusted code (e.g., code that comes from the internet) and rely on the\nJava sandbox for security. This vulnerability does not apply to Java\ndeployments, typically in servers, that load and run only trusted code\n(e.g., code installed by an administrator). (CVE-2019-2422)\n","status":"published","published":"2019-02-13T11:08:25Z","modified":"2026-04-16T06:25:45.945723086Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:0161-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk to version 11.0.2+7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2422: Better FileChannel transfer performance (bsc#1122293)\n- CVE-2019-2426: Improve web server connections\n- CVE-2018-11212: Improve JPEG processing (bsc#1122299)\n- Better route routing\n- Better interface enumeration\n- Better interface lists\n- Improve BigDecimal support\n- Improve robot support\n- Better icon support\n- Choose printer defaults\n- Proper allocation handling\n- Initial class initialization\n- More reliable p11 transactions\n- Improve NIO stability\n- Better loading of classloader classes\n- Strengthen Windows Access Bridge Support\n- Improved data set handling\n- Improved LSA authentication\n- Libsunmscapi improved interactions\n\nNon-security issues fix:\n\n- Do not resolve by default the added JavaEE modules (bsc#1120431)\n- ~2.5% regression on compression benchmark starting with 12-b11\n- java.net.http.HttpClient hangs on 204 reply without Content-length 0\n- Add additional TeliaSonera root certificate\n- Add more ld preloading related info to hs_error file on Linux\n- Add test to exercise server-side client hello processing\n- AES encrypt performance regression in jdk11b11\n- AIX: ProcessBuilder: Piping between created processes does not work.\n- AIX: Some class library files are missing the Classpath exception\n- AppCDS crashes for some uses with JRuby\n- Automate vtable/itable stub size calculation\n- BarrierSetC1::generate_referent_check() confuses register allocator\n- Better HTTP Redirection\n- Catastrophic size_t underflow in BitMap::*_large methods\n- Clip.isRunning() may return true after Clip.stop() was called\n- Compiler thread creation should be bounded by available space in memory and Code Cache\n- com.sun.net.httpserver.HttpServer returns Content-length header for 204 response code\n- Default mask register for avx512 instructions\n- Delayed starting of debugging via jcmd\n- Disable all DES cipher suites\n- Disable anon and NULL cipher suites\n- Disable unsupported GCs for Zero\n- Epsilon alignment adjustments can overflow max TLAB size\n- Epsilon elastic TLAB sizing may cause misalignment\n- HotSpot update for vm_version.cpp to recognise updated VS2017\n- HttpClient does not retrieve files with large sizes over HTTP/1.1\n- IIOException 'tEXt chunk length is not proper' on opening png file\n- Improve TLS connection stability again\n- InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection\n- Inspect stack during error reporting\n- Instead of circle rendered in appl window, but ellipse is produced JEditor Pane\n- Introduce diagnostic flag to abort VM on failed JIT compilation\n- Invalid assert(HeapBaseMinAddress \u003e 0) in ReservedHeapSpace::initialize_compressed_heap\n- jar has issues with UNC-path arguments for the jar -C parameter [windows]\n- java.net.http HTTP client should allow specifying Origin and Referer headers\n- java.nio.file.Files.writeString writes garbled UTF-16 instead of UTF-8\n- JDK 11.0.1 l10n resource file update\n- JDWP Transport Listener: dt_socket thread crash\n- JVMTI ResourceExhausted should not be posted in CompilerThread\n- LDAPS communication failure with jdk 1.8.0_181\n- linux: Poor StrictMath performance due to non-optimized compilation\n- Missing synchronization when reading counters for live threads and peak thread count\n- NPE in SupportedGroupsExtension\n- OpenDataException thrown when constructing CompositeData for StackTraceElement\n- Parent class loader may not have a referred ClassLoaderData instance when obtained in Klass::class_in_module_of_loader\n- Populate handlers while holding streamHandlerLock\n- ppc64: Enable POWER9 CPU detection\n- print_location is not reliable enough (printing register info)\n- Reconsider default option for ClassPathURLCheck change done in JDK-8195874\n- Register to register spill may use AVX 512 move instruction on unsupported platform.\n- s390: Use of shift operators not covered by cpp standard\n- serviceability/sa/TestUniverse.java#id0 intermittently fails with assert(get_instanceKlass()-\u003eis_loaded()) failed: must be at least loaded\n- SIGBUS in CodeHeapState::print_names()\n- SIGSEGV in MethodArityHistogram() with -XX:+CountCompiledCalls\n- Soft reference reclamation race in com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator\n- Swing apps are slow if displaying from a remote source to many local displays\n- switch jtreg to 4.2b13\n- Test library OSInfo.getSolarisVersion cannot determine Solaris version\n- TestOptionsWithRanges.java is very slow\n- TestOptionsWithRanges.java of '-XX:TLABSize=2147483648' fails intermittently\n- The Japanese message of FileNotFoundException garbled\n- The 'supported_groups' extension in ServerHellos\n- ThreadInfoCompositeData.toCompositeData fails to map ThreadInfo to CompositeData\n- TimeZone.getDisplayName given Locale.US doesn't always honor the Locale.\n- TLS 1.2 Support algorithm in SunPKCS11 provider\n- TLS 1.3 handshake server name indication is missing on a session resume\n- TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes\n- TLS 1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth\n- tz: Upgrade time-zone data to tzdata2018g\n- Undefined behaviour in ADLC\n- Update avx512 implementation\n- URLStreamHandler initialization race\n- UseCompressedOops requirement check fails fails on 32-bit system\n- windows: Update OS detection code to recognize Windows Server 2019\n- x86: assert on unbound assembler Labels used as branch targets\n- x86: jck tests for ldc2_w bytecode fail\n- x86: sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization\n- '-XX:OnOutOfMemoryError' uses fork instead of vfork\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:55:18Z","modified":"2026-02-04T03:41:49.227271Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2019:0346-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version jdk8u201 (icedtea 3.11.0) fixes the following issues:\n\t  \nSecurity issues fixed: \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\t\n\nComplete list of changes: https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/041223.html \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:16:01Z","modified":"2026-02-04T02:44:15.026219Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10871-1","title":"java-11-openjdk-11.0.12.0-3.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:19.394894Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10872-1","title":"java-13-openjdk-13.0.8.0-3.1 on GA media","description":"These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:55.885522Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10873-1","title":"java-15-openjdk-15.0.4.0-2.1 on GA media","description":"These are all security issues fixed in the java-15-openjdk-15.0.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:38:37.743883Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0221-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk to version 11.0.2+7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2422: Better FileChannel transfer performance (bsc#1122293)\n- CVE-2019-2426: Improve web server connections\n- CVE-2018-11212: Improve JPEG processing (bsc#1122299)\n- Better route routing\n- Better interface enumeration\n- Better interface lists\n- Improve BigDecimal support\n- Improve robot support\n- Better icon support\n- Choose printer defaults\n- Proper allocation handling\n- Initial class initialization\n- More reliable p11 transactions\n- Improve NIO stability\n- Better loading of classloader classes\n- Strengthen Windows Access Bridge Support\n- Improved data set handling\n- Improved LSA authentication\n- Libsunmscapi improved interactions\n\nNon-security issues fix:\n\n- Do not resolve by default the added JavaEE modules (bsc#1120431)\n- ~2.5% regression on compression benchmark starting with 12-b11\n- java.net.http.HttpClient hangs on 204 reply without Content-length 0\n- Add additional TeliaSonera root certificate\n- Add more ld preloading related info to hs_error file on Linux\n- Add test to exercise server-side client hello processing\n- AES encrypt performance regression in jdk11b11\n- AIX: ProcessBuilder: Piping between created processes does not work.\n- AIX: Some class library files are missing the Classpath exception\n- AppCDS crashes for some uses with JRuby\n- Automate vtable/itable stub size calculation\n- BarrierSetC1::generate_referent_check() confuses register allocator\n- Better HTTP Redirection\n- Catastrophic size_t underflow in BitMap::*_large methods\n- Clip.isRunning() may return true after Clip.stop() was called\n- Compiler thread creation should be bounded by available space in memory and Code Cache\n- com.sun.net.httpserver.HttpServer returns Content-length header for 204 response code\n- Default mask register for avx512 instructions\n- Delayed starting of debugging via jcmd\n- Disable all DES cipher suites\n- Disable anon and NULL cipher suites\n- Disable unsupported GCs for Zero\n- Epsilon alignment adjustments can overflow max TLAB size\n- Epsilon elastic TLAB sizing may cause misalignment\n- HotSpot update for vm_version.cpp to recognise updated VS2017\n- HttpClient does not retrieve files with large sizes over HTTP/1.1\n- IIOException 'tEXt chunk length is not proper' on opening png file\n- Improve TLS connection stability again\n- InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection\n- Inspect stack during error reporting\n- Instead of circle rendered in appl window, but ellipse is produced JEditor Pane\n- Introduce diagnostic flag to abort VM on failed JIT compilation\n- Invalid assert(HeapBaseMinAddress \u003e 0) in ReservedHeapSpace::initialize_compressed_heap\n- jar has issues with UNC-path arguments for the jar -C parameter [windows]\n- java.net.http HTTP client should allow specifying Origin and Referer headers\n- java.nio.file.Files.writeString writes garbled UTF-16 instead of UTF-8\n- JDK 11.0.1 l10n resource file update\n- JDWP Transport Listener: dt_socket thread crash\n- JVMTI ResourceExhausted should not be posted in CompilerThread\n- LDAPS communication failure with jdk 1.8.0_181\n- linux: Poor StrictMath performance due to non-optimized compilation\n- Missing synchronization when reading counters for live threads and peak thread count\n- NPE in SupportedGroupsExtension\n- OpenDataException thrown when constructing CompositeData for StackTraceElement\n- Parent class loader may not have a referred ClassLoaderData instance when obtained in Klass::class_in_module_of_loader\n- Populate handlers while holding streamHandlerLock\n- ppc64: Enable POWER9 CPU detection\n- print_location is not reliable enough (printing register info)\n- Reconsider default option for ClassPathURLCheck change done in JDK-8195874\n- Register to register spill may use AVX 512 move instruction on unsupported platform.\n- s390: Use of shift operators not covered by cpp standard\n- serviceability/sa/TestUniverse.java#id0 intermittently fails with assert(get_instanceKlass()-\u003eis_loaded()) failed: must be at least loaded\n- SIGBUS in CodeHeapState::print_names()\n- SIGSEGV in MethodArityHistogram() with -XX:+CountCompiledCalls\n- Soft reference reclamation race in com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator\n- Swing apps are slow if displaying from a remote source to many local displays\n- switch jtreg to 4.2b13\n- Test library OSInfo.getSolarisVersion cannot determine Solaris version\n- TestOptionsWithRanges.java is very slow\n- TestOptionsWithRanges.java of '-XX:TLABSize=2147483648' fails intermittently\n- The Japanese message of FileNotFoundException garbled\n- The 'supported_groups' extension in ServerHellos\n- ThreadInfoCompositeData.toCompositeData fails to map ThreadInfo to CompositeData\n- TimeZone.getDisplayName given Locale.US doesn't always honor the Locale.\n- TLS 1.2 Support algorithm in SunPKCS11 provider\n- TLS 1.3 handshake server name indication is missing on a session resume\n- TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes\n- TLS 1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth\n- tz: Upgrade time-zone data to tzdata2018g\n- Undefined behaviour in ADLC\n- Update avx512 implementation\n- URLStreamHandler initialization race\n- UseCompressedOops requirement check fails fails on 32-bit system\n- windows: Update OS detection code to recognize Windows Server 2019\n- x86: assert on unbound assembler Labels used as branch targets\n- x86: jck tests for ldc2_w bytecode fail\n- x86: sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization\n- '-XX:OnOutOfMemoryError' uses fork instead of vfork\n","status":"published","published":"2019-02-01T14:20:56Z","modified":"2026-02-04T03:01:45.811536Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0574-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version jdk8u201 (icedtea 3.11.0) fixes the following issues:\n\t  \nSecurity issues fixed: \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\t\n\nComplete list of changes: https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/041223.html \n","status":"published","published":"2019-03-08T14:23:01Z","modified":"2025-05-02T04:07:31.152669Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0585-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\n- CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158).\n- CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). \n\nMore information: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332\n","status":"published","published":"2019-03-12T11:59:13Z","modified":"2026-02-04T04:07:11.121163Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0604-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm to version 7.1.4.40 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\t  \n\nMore information: https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_February_2019\n","status":"published","published":"2019-03-13T09:45:05Z","modified":"2026-02-04T04:37:38.967811Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0617-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\n- CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158).\n- CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). \n\nMore information: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332\t  \n","status":"published","published":"2019-03-15T12:14:42Z","modified":"2026-02-04T04:29:36.978412Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1219-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk to version 8u212 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2602: Better String parsing (bsc#1132728).\n- CVE-2019-2684: More dynamic RMI interactions (bsc#1132732).\n- CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729).\n- CVE-2019-2422: Better FileChannel (bsc#1122293).\n- CVE-2018-11212: Improve JPEG (bsc#1122299).\n\nNon-Security issue fixed:\n\n- Disable LTO (bsc#1133135).\n- Added Japanese new era name.\n","status":"published","published":"2019-05-13T11:27:16Z","modified":"2026-02-04T03:36:35.869312Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1392-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\nUpdate to 2.6.18 - OpenJDK 7u221 (April 2019 CPU)\n\nSecurity issues fixed:\n\n- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).\n- CVE-2019-2684: Fixed flaw inside the RMI registry implementation (bsc#1132732).\n- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).\n- CVE-2019-2422: Fixed memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed a Divide By Zero in alloc_sarray function in jmemmgr.c (bsc#1122299).\n- CVE-2019-2426: Improve web server connections (bsc#1134297).\n\nBug fixes:\n\n- Please check the package Changelog for detailed information.\n","status":"published","published":"2019-05-31T08:15:17Z","modified":"2026-02-04T04:20:30.711935Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13975-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm to version 7.0.10.40 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\t\n\nMore information: https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_February_2019\n","status":"published","published":"2019-03-12T17:39:36Z","modified":"2026-02-04T02:16:17.785015Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:13978-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm to version 7.1.4.40 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).\n- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).\n\nMore information: https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_February_2019\n","status":"published","published":"2019-03-14T09:38:52Z","modified":"2026-02-04T03:25:17.920325Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2291-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n","status":"published","published":"2019-09-04T14:48:56Z","modified":"2026-02-04T04:38:30.048658Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2371-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 5 Fix Pack 40.\n\nSecurity issues fixed:\n\n- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)\n- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).\n- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).\n- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).\n- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).\n- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).\n- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).\n","status":"published","published":"2019-09-12T11:32:19Z","modified":"2026-02-04T03:20:01.110016Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3706-1","title":"libjpeg-turbo vulnerabilities","description":"It was discovered that libjpeg-turbo incorrectly handled certain malformed\nJPEG images. If a user or automated system were tricked into opening a\nspecially crafted JPEG image, a remote attacker could cause libjpeg-turbo\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2018-07-09T16:40:19Z","modified":"2026-04-27T15:33:01.375018017Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-5336-1","title":"libjpeg9 vulnerabilities","description":"Aladdin Mubaied discovered that the cjpeg utility in libjpeg9 did not properly\nvalidate the input image's size. An attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code. (CVE-2016-3616)\n\nIt was discovered that the cjpeg utility in libjpeg9 incorrectly handled\ncertain input. An attacker could possibly use these issues to cause a denial of\nservice. (CVE-2018-11212, CVE-2018-11813, CVE-2020-14152, CVE-2020-14153)\n\nIt was discovered that the cjpeg utility in libjpeg9 incorrectly handled\nmemory when supplied with certain input. An attacker could possibly use these\nissues to cause a denial of service or execute arbitrary code.\n(CVE-2018-11213, CVE-2018-11214)\n","status":"published","published":"2022-03-23T12:40:00Z","modified":"2026-06-25T13:31:05.277712278Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5497-1","title":"libjpeg6b vulnerabilities","description":"It was discovered that Libjpeg6b was not properly performing bounds\nchecks when compressing PPM and Targa image files. An attacker could\npossibly use this issue to cause a denial of service.\n(CVE-2018-11212)\n\nChijin Zhou discovered that Libjpeg6b was incorrectly handling the\nEOF character in input data when generating JPEG files. An attacker\ncould possibly use this issue to force the execution of a large loop,\nforce excessive memory consumption, and cause a denial of service.\n(CVE-2018-11813)\n\nSheng Shu and Dongdong She discovered that Libjpeg6b was not properly\nlimiting the amount of memory being used when it was performing\ndecompression or multi-pass compression operations. An attacker could\npossibly use this issue to force excessive memory consumption and\ncause a denial of service. (CVE-2020-14152)\n","status":"published","published":"2022-06-30T12:54:31Z","modified":"2026-06-29T13:49:39.229984442Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5497-2","title":"libjpeg6b vulnerabilities","description":"USN-5497-1 fixed vulnerabilities in Libjpeg6b. This update provides\nthe corresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Libjpeg6b was not properly performing bounds\n checks when compressing PPM and Targa image files. An attacker could\n possibly use this issue to cause a denial of service.\n (CVE-2018-11212)\n\n Chijin Zhou discovered that Libjpeg6b was incorrectly handling the\n EOF character in input data when generating JPEG files. An attacker\n could possibly use this issue to force the execution of a large loop,\n force excessive memory consumption, and cause a denial of service.\n (CVE-2018-11813)\n\n Sheng Shu and Dongdong She discovered that Libjpeg6b was not properly\n limiting the amount of memory being used when it was performing\n decompression or multi-pass compression operations. An attacker could\n possibly use this issue to force excessive memory consumption and\n cause a denial of service. (CVE-2020-14152)\n","status":"published","published":"2022-06-30T14:35:28Z","modified":"2026-06-25T13:31:16.656823525Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}