{"id":"CVE-2018-2602","aliases":["BELL-CVE-2018-2602","DLA-1339-1","DSA-4144-1","DSA-4166-1","EUVD-2018-14457","GHSA-qxwp-32m5-jv9g","MGASA-2018-0104","RHSA-2018:0095","RHSA-2018:0099","RHSA-2018:0100","RHSA-2018:0115","RHSA-2018:0349","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:1463","RHSA-2018:1812","SUSE-SU-2018:0630-1","SUSE-SU-2018:0645-1","SUSE-SU-2018:0661-1","SUSE-SU-2018:0663-1","SUSE-SU-2018:0665-1","SUSE-SU-2018:0694-1","SUSE-SU-2018:0743-1","UBUNTU-CVE-2018-2602","USN-3613-1","USN-3614-1","openSUSE-SU-2024:10876-1"],"status":"published","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)....","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.00631,"percentile":0.50431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-01-17T00:00:00Z","modified":"2026-07-01T10:03:50Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","fixed_in":["7u171-2.6.13-0ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","fixed_in":["8u162-b12-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u171-2.6.13-1~deb7u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2","7u121-2.6.8-2~deb7u1","7u121-2.6.8-2~deb8u1","7u13-2.3.6-1","7u131-2.6.9-1","7u131-2.6.9-2","7u131-2.6.9-2~deb7u1","7u131-2.6.9-2~deb8u1","7u131-2.6.9-3","7u15-2.3.7-1","7u151-2.6.11-1","7u151-2.6.11-1+deb7u1","7u151-2.6.11-1~deb8u1","7u151-2.6.11-2","7u151-2.6.11-2~deb7u2","7u151-2.6.11-2~deb7u3","7u151-2.6.11-2~deb8u1","7u151-2.6.11-3","7u161-2.6.12-1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6~deb7u1","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":14},{"source":"osv","ecosystem":"Debian:9","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u162-b12-1~deb9u1"}]}],"versions":["8u131-b11-2","8u141-b15-1","8u141-b15-1~deb9u1","8u141-b15-2","8u141-b15-3","8u144-b01-1","8u144-b01-2","8u151-b12-1","8u151-b12-1~deb9u1","8u162-b12-1~bpo8+1"],"bundled":15},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u171-2.6.13-1~deb8u1"}]}],"versions":["7u101-2.6.6-1","7u101-2.6.6-1~deb8u1","7u101-2.6.6-2","7u101-2.6.6-2~deb7u1","7u101-2.6.6-2~deb8u1","7u111-2.6.7-1","7u111-2.6.7-1~deb7u1","7u111-2.6.7-1~deb8u1","7u111-2.6.7-2","7u111-2.6.7-2~deb7u1","7u111-2.6.7-2~deb8u1","7u111-2.6.7-3","7u121-2.6.8-1","7u121-2.6.8-1~deb7u1","7u121-2.6.8-2","7u121-2.6.8-2~deb7u1","7u121-2.6.8-2~deb8u1","7u131-2.6.9-1","7u131-2.6.9-2","7u131-2.6.9-2~deb7u1","7u131-2.6.9-2~deb8u1","7u131-2.6.9-3","7u151-2.6.11-1","7u151-2.6.11-1~deb8u1","7u151-2.6.11-2","7u151-2.6.11-2~deb7u2","7u151-2.6.11-2~deb7u3","7u151-2.6.11-2~deb8u1","7u151-2.6.11-3","7u161-2.6.12-1","7u171-2.6.13-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1","7u79-2.5.6-1~deb7u1","7u79-2.5.6-1~deb8u1","7u85-2.6.1-1","7u85-2.6.1-2","7u85-2.6.1-3","7u85-2.6.1-4","7u85-2.6.1-5","7u85-2.6.1-5~deb8u1","7u85-2.6.1-6","7u85-2.6.1-6+deb8u1","7u85-2.6.1-6~deb7u1","7u91-2.6.2-1","7u91-2.6.3-1","7u91-2.6.3-1+sparc64","7u91-2.6.3-1~deb7u1","7u91-2.6.3-1~deb8u1","7u91-2.6.3-2","7u91-2.6.3-3","7u95-2.6.4-1","7u95-2.6.4-1~deb7u1","7u95-2.6.4-1~deb8u1","7u95-2.6.4-2","7u95-2.6.4-3"],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-1.b14.1.mga5"}]}],"bundled":15},{"source":"osv","ecosystem":"Mageia:6","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-1.b14.1.mga6"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-3.b14.el6_9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-0.b14.el7_4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.1.el6_9"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.161-1jpp.2.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.1.el6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.181-1jpp.2.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el6_9"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.171-2.6.13.0.el7_4"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-26.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.20-65.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.171-43.12.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.161-27.13.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.10-30.16.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.20-38.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u171-2.6.13-0ubuntu0.14.04.2"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1","7u121-2.6.8-1ubuntu0.14.04.3","7u131-2.6.9-0ubuntu0.14.04.1","7u131-2.6.9-0ubuntu0.14.04.2","7u151-2.6.11-0ubuntu1.14.04.1","7u151-2.6.11-2ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u162-b12-0ubuntu0.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u162-b12-0ubuntu0.16.04.2"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u171-2.6.13-0ubuntu0.14.04.2"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2","7u79-2.5.6-0ubuntu1.14.04.1","7u85-2.6.1-5ubuntu0.14.04.1","7u91-2.6.3-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.1","7u95-2.6.4-0ubuntu0.14.04.2","7u101-2.6.6-0ubuntu0.14.04.1","7u111-2.6.7-0ubuntu0.14.04.3","7u121-2.6.8-1ubuntu0.14.04.1","7u121-2.6.8-1ubuntu0.14.04.3","7u131-2.6.9-0ubuntu0.14.04.1","7u131-2.6.9-0ubuntu0.14.04.2","7u151-2.6.11-0ubuntu1.14.04.1","7u151-2.6.11-2ubuntu0.14.04.1"],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.302-2.2"}]}],"bundled":175}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"hp","product":"xp7_command_view"},{"vendor":"hp","product":"xp_command_view"},{"vendor":"hp","product":"xp_p9000_command_view"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"java"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"},{"vendor":"schneider-electric","product":"struxureware_data_center_expert"}],"references":[{"url":"http://www.securityfocus.com/bid/102642","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0351","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3614-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4166","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0095","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4144","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0521","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0352","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0115","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/04/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1812","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03911en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0099","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1463","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0458","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0349","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1040203","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://usn.ubuntu.com/3613-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0100","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2602","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qxwp-32m5-jv9g"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-2602","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0104.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22411","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535036","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0095.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2602","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2678","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2678","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0099.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2783","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_171","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535353","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0100.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2657","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_181","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0115.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0349.json","tags":["advisory"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0351.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568966","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1417","tags":["advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/138823","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0352.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0458.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0521.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1463.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1812.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180630-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1057460","tags":["report"]},{"url":"https://bugzilla.suse.com/1076390","tags":["report"]},{"url":"https://bugzilla.suse.com/1082810","tags":["report"]},{"url":"https://bugzilla.suse.com/929900","tags":["report"]},{"url":"https://bugzilla.suse.com/966304","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2678","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180645-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180661-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076366","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2629","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180663-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180665-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/955131","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2639","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180694-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085018","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180743-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-2602","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3613-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3614-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-2579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-2678","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-2602","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","status":"published","published":"2018-01-18T02:00:00Z","modified":"2024-10-03T20:42:39.299Z","updated_at":"2026-11-02T14:35:04.911021Z"}],"euvd":[{"id":"EUVD-2018-14457","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","status":"published","published":"2018-01-18T02:00:00Z","modified":"2024-10-03T20:42:39Z","updated_at":"2026-11-03T00:27:52.351144Z"}],"ghsa":[{"id":"GHSA-qxwp-32m5-jv9g","title":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)....","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","status":"published","published":"2022-05-13T01:16:52Z","modified":"2023-02-01T05:05:00Z","cvss":[{"version":"3.0","score":4.5,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T14:50:12.520785Z"}],"nvd":[{"id":"CVE-2018-2602","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","status":"published","published":"2018-01-18T02:29:19.24Z","modified":"2026-06-17T01:55:53.973Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"BELL-CVE-2018-2602","title":"CVE-2018-2602 does not affect BellSoft software","status":"withdrawn","published":"2018-01-18T02:29:00Z","modified":"2026-01-26T09:49:58.213711Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"RHSA-2018:0095","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-16T00:57:30Z","modified":"2026-06-29T10:19:00Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0099","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-16T00:56:41Z","modified":"2026-06-29T10:19:00Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0100","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-16T00:56:47Z","modified":"2026-06-28T10:23:04Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0115","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-16T00:56:54Z","modified":"2026-06-28T10:23:05Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0349","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-16T00:57:38Z","modified":"2026-06-29T10:19:15Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0351","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:57:11Z","modified":"2026-07-01T10:03:22Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0352","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:57:06Z","modified":"2026-07-01T10:03:23Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0458","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:22Z","modified":"2026-07-01T10:03:27Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0521","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:16Z","modified":"2026-07-01T10:03:33Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1463","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:56:59Z","modified":"2026-07-01T10:03:50Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1812","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:56:45Z","modified":"2026-06-28T10:25:08Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-2602","description":"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).","status":"published","published":"2018-01-17T00:00:00Z","modified":"2026-02-04T04:03:34.216494Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.0","score":4.5,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"DLA-1339-1","title":"openjdk-7 - security update","status":"published","published":"2018-04-03T00:00:00Z","modified":"2026-03-09T01:00:55.518849Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4144-1","title":"openjdk-8 - security update","status":"published","published":"2018-03-17T00:00:00Z","modified":"2026-03-09T01:22:09.262945Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4166-1","title":"openjdk-7 - security update","status":"published","published":"2018-04-04T00:00:00Z","modified":"2026-03-09T01:18:33.367816Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0104","title":"Updated java-1.8.0-openjdk packages fix security vulnerability","description":"Multiple flaws were found in the Hotspot and AWT components of OpenJDK. An\nuntrusted Java application or applet could use these flaws to bypass certain\nJava sandbox restrictions (CVE-2018-2582, CVE-2018-2641).\n\nIt was discovered that the LDAPCertStore class in the JNDI component of\nOpenJDK failed to securely handle LDAP referrals. An attacker could possibly\nuse this flaw to make it fetch attacker controlled certificate data\n(CVE-2018-2633).\n\nThe JGSS component of OpenJDK ignores the value of the\njavax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO\nauthentication and always uses global credentials. It was discovered that this\ncould cause global credentials to be unexpectedly used by an untrusted Java\napplication (CVE-2018-2634).\n\nIt was discovered that the JMX component of OpenJDK failed to properly set the\ndeserialization filter for the SingleEntryRegistry in certain cases. A remote\nattacker could possibly use this flaw to bypass intended deserialization\nrestrictions (CVE-2018-2637).\n\nIt was discovered that the LDAP component of OpenJDK failed to properly encode\nspecial characters in user names when adding them to an LDAP search query. A\nremote attacker could possibly use this flaw to manipulate LDAP queries\nperformed by the LdapLoginModule class (CVE-2018-2588).\n\nIt was discovered that the DNS client implementation in the JNDI component of\nOpenJDK did not use random source ports when sending out DNS queries. This\ncould make it easier for a remote attacker to spoof responses to those queries\n(CVE-2018-2599).\n\nIt was discovered that the I18n component of OpenJDK could use an untrusted\nsearch path when loading resource bundle classes. A local attacker could\npossibly use this flaw to execute arbitrary code as another local user by\nmaking their Java application load an attacker controlled class file\n(CVE-2018-2602).\n\nIt was discovered that the Libraries component of OpenJDK failed to\nsufficiently limit the amount of memory allocated when reading DER encoded\ninput. A remote attacker could possibly use this flaw to make a Java\napplication use an excessive amount of memory if it parsed attacker supplied\nDER encoded input (CVE-2018-2603).\n\nIt was discovered that the key agreement implementations in the JCE component\nof OpenJDK did not guarantee sufficient strength of used keys to adequately\nprotect generated shared secret. This could make it easier to break data\nencryption by attacking key agreement rather than the encryption using the\nnegotiated secret (CVE-2018-2618).\n\nIt was discovered that the JGSS component of OpenJDK failed to properly handle\nGSS context in the native GSS library wrapper in certain cases. A remote\nattacker could possibly make a Java application using JGSS to use a previously\nfreed context (CVE-2018-2629).\n\nIt was discovered that multiple classes in the Libraries, AWT, and JNDI\ncomponents of OpenJDK did not sufficiently validate input when creating object\ninstances from the serialized form. A specially-crafted input could cause a\nJava application to create objects with an inconsistent state or use an\nexcessive amount of memory when deserialized (CVE-2018-2663, CVE-2018-2677,\nCVE-2018-2678).\n\nIt was discovered that multiple encryption key classes in the Libraries\ncomponent of OpenJDK did not properly synchronize access to their internal\ndata. This could possibly cause a multi-threaded Java application to apply\nweak encryption to data because of the use of a key that was zeroed out\n(CVE-2018-2579).\n","status":"published","published":"2018-02-02T12:33:47Z","modified":"2026-04-16T06:23:05.82037593Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10876-1","title":"java-1_8_0-openjdk-1.8.0.302-2.2 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:42.093736Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:0630-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm provides the following fix:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n             apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n           trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n            converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n            policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl – Bad sessions are being allocated\n            internally\n  - IJ02706 Security: IBMPKCS11Impl – Bad sessions are being allocated\n            internally\n  - IJ03552 Security: IBMPKCS11Impl - Config file problem with the slot\n            specification attribute\n  - IJ01901 Security: IBMPKCS11Impl – SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n            stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n","status":"published","published":"2018-03-07T09:32:48Z","modified":"2026-02-04T03:47:29.082541Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0645-1","title":"Security update for java-1_7_0-ibm","description":"\n  \nThis update for java-1_7_0-ibm provides the following fixes:\n\nThe version was updated to 7.0.10.20 [bsc#1082810]:\n\n* Following security issues were fixed:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n    - IJ04281 Class Libraries: Startup time increase after applying\n      \t      apar IV96905\n    - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n    - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n      \t      trace, log was not enabled by default\n    - IJ03607 JIT Compiler: Result String contains a redundant dot when\n      \t      converted from BigDecimal with 0 on all platforms\n    - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n    - IJ04282 Security: Change in location and default of jurisdiction\n      \t      policy files\n    - IJ03853 Security: IBMCAC provider does not support SHA224\n    - IJ02679 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ02706 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ03552 Security: IBMPKCS11Impl - Config file problem with the slot\n      \t      specification attribute\n    - IJ01901 Security: IBMPKCS11Impl – SecureRandom.setSeed() exception\n    - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n      \t      stash, JKS Chain issue and JVM argument parse issue with iKeyman\n    - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n    - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n","status":"published","published":"2018-03-09T07:25:29Z","modified":"2025-05-02T04:08:12.398005Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0661-1","title":"Security update for java-1_7_0-openjdk","description":"This update for java-1_7_0-openjdk fixes the following issues:\n\nSecurity issues fixed in OpenJDK 7u171 (January 2018 CPU)(bsc#1076366):\n\n- CVE-2018-2579: Improve key keying case\n- CVE-2018-2588: Improve LDAP logins\n- CVE-2018-2599: Improve reliability of DNS lookups\n- CVE-2018-2602: Improve usage messages\n- CVE-2018-2603: Improve PKCS usage\n- CVE-2018-2618: Stricter key generation\n- CVE-2018-2629: Improve GSS handling\n- CVE-2018-2633: Improve LDAP lookup robustness\n- CVE-2018-2634: Improve property negotiations\n- CVE-2018-2637: Improve JMX supportive features\n- CVE-2018-2641: Improve GTK initialization\n- CVE-2018-2663: More refactoring for deserialization cases\n- CVE-2018-2677: More refactoring for client deserialization cases\n- CVE-2018-2678: More refactoring for naming\n","status":"published","published":"2018-03-12T12:17:09Z","modified":"2026-02-04T03:28:14.521324Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0663-1","title":"Security update for java-1_8_0-openjdk","description":"This update for java-1_8_0-openjdk fixes the following issues:\n\nSecurity issues fix in jdk8u161 (icedtea 3.7.0)(bsc#1076366):\n\n- CVE-2018-2579: Improve key keying case\n- CVE-2018-2582: Better interface invocations\n- CVE-2018-2588: Improve LDAP logins\n- CVE-2018-2599: Improve reliability of DNS lookups\n- CVE-2018-2602: Improve usage messages\n- CVE-2018-2603: Improve PKCS usage\n- CVE-2018-2618: Stricter key generation\n- CVE-2018-2629: Improve GSS handling\n- CVE-2018-2633: Improve LDAP lookup robustness\n- CVE-2018-2634: Improve property negotiations\n- CVE-2018-2637: Improve JMX supportive features\n- CVE-2018-2641: Improve GTK initialization\n- CVE-2018-2663: More refactoring for deserialization cases\n- CVE-2018-2677: More refactoring for client deserialization cases\n- CVE-2018-2678: More refactoring for naming deserialization cases\n","status":"published","published":"2018-03-12T12:18:36Z","modified":"2026-02-04T04:15:06.381903Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0665-1","title":"Security update for java-1_8_0-ibm","description":"\n  \nThis update for java-1_8_0-ibm fixes the following issues:\n\n- Removed java-1_8_0-ibm-alsa and java-1_8_0-ibm-plugin entries in\n  baselibs.conf due to errors in osc source_validator\n\nVersion update to 8.0.5.10 [bsc#1082810]\n\n* Security fixes:\n\n    CVE-2018-2639 CVE-2018-2638 CVE-2018-2633 CVE-2018-2637\n    CVE-2018-2634 CVE-2018-2582 CVE-2018-2641 CVE-2018-2618\n    CVE-2018-2603 CVE-2018-2599 CVE-2018-2602 CVE-2018-2678\n    CVE-2018-2677 CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n    - IJ02608 Class Libraries: Change of namespace definitions with\n      \t      handlers that implement javax.xml.ws.handler.soap.soaphandler\n    - IJ04280 Class Libraries: Deploy Upgrade to Oracle level 8u161-b12\n    - IJ03390 Class Libraries: JCL Upgrade to Oracle level 8u161-b12\n    - IJ04001 Class Libraries: Performance improvement with child\n      \t      process on AIX\n    - IJ04281 Class Libraries: Startup time increase after applying\n      \t      apar IV96905\n    - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n    - IJ03440 Java Virtual Machine: Assertion failure during class creation\n    - IJ03717 Java Virtual Machine: Assertion for gencon with concurrent\n      \t      scavenger on ZOS64\n    - IJ03513 Java Virtual Machine: Assertion in concurrent scavenger if\n      \t      initial heap memory size -Xms is set too low\n    - IJ03994 Java Virtual Machine: Class.getmethods() does not return\n      \t      all methods\n    - IJ03413 Java Virtual Machine: Hang creating thread after redefining\n      \t      classes\n    - IJ03852 Java Virtual Machine: ICH408I message when groupaccess is\n      \t      specified with -xshareclasses\n    - IJ03716 Java Virtual Machine: java/lang/linkageerror from\n      \t      sun/misc/unsafe.definean onymousclass()\n    - IJ03116 Java Virtual Machine: java.fullversion string contains an\n      \t      extra space\n    - IJ03347 Java Virtual Machine: java.lang.IllegalStateException in\n      \t      related class MemoryMXBean\n    - IJ03878 Java Virtual Machine: java.lang.StackOverflowError is thrown\n      \t      when custom security manager in place\n    - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n      \t      trace, log was not enabled by default\n    - IJ04248 JIT Compiler: ArrayIndexOutOfBoundsException is thrown when\n      \t      converting BigDecimal to String\n    - IJ04250 JIT Compiler: Assertion failure with concurrentScavenge on Z14\n    - IJ03606 JIT Compiler: Java crashes with -version\n    - IJ04251 JIT Compiler: JIT compiled method that takes advantage of\n      \t      AutoSIMD produces an incorrect result on x86\n    - IJ03854 JIT Compiler: JVM info message appears in stdout\n    - IJ03607 JIT Compiler: Result String contains a redundant dot when\n      \t      converted from BigDecimal with 0 on all platforms\n    - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n    - IJ03715 Security: Add additional support for the IBMJCEPlus provider,\n      \t      add support for new IBMJCEPlusFIPS provider\n    - IJ03800 Security: A fix in CMS provider for KDB integrity\n    - IJ04282 Security: Change in location and default of jurisdiction\n      \t      policy files\n    - IJ03853 Security: IBMCAC provider does not support SHA224\n    - IJ02679 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ02706 Security: IBMPKCS11Impl – Bad sessions are being allocated\n      \t      internally\n    - IJ03552 Security: IBMPKCS11Impl - Config file problem with the slot\n      \t      specification attribute\n    - IJ01901 Security: IBMPKCS11Impl – SecureRandom.setSeed() exception\n    - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n      \t      stash, JKS Chain issue and JVM argument parse issue with iKeyman\n    - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n    - PI93233 z/OS Extentions: Cipher.doFinal() fails when using\n      \t      AES/GCM/nopadding with AAD data of 13 bytes and a block size\n\t      of 4081 to 4096\n\n* Fixes in 8.0.5.7:\n\n    - IJ02605 Class Libraries: Update IBM-1371 charset with new specification\n      \t      support\n    - IJ02541 Java Virtual Machine: Assertions in GC when jvmti runs with\n      \t      Concurrent Scavenger\n    - IJ02443 Java Virtual Machine: Committed eden region size is bigger than\n      \t      maximum eden region size\n    - IJ02378 Java Virtual Machine: Existing signal action for SIG_IGN/SIG_DFL\n      \t      is not detected properly\n    - IJ02758 JIT Compiler: Crash in JIT module during method compilation\n    - IJ02733 JIT Compiler: Crash in jit module when compiling in non-default\n      \t      configuration\n\n* Fixes in 8.0.5.6:\n\n    - IJ02283 Java Virtual Machine: IllegalAccessException due to a missing\n      \t      access check for the same class in MethodHandle apis\n    - IJ02082 Java Virtual Machine: The default value for class unloading kick\n      \t      off threshold is not set\n    - IJ02018 JIT Compiler: Crash or assertion while attempting to acquire\n      \t      VM access\n    - IJ02284 JIT Compiler: Division by zero in JIT compiler\n    - IV88941 JIT Compiler: JIT compiler takes far too long to compile a\n      \t      method\n    - IJ02285 JIT Compiler: Performance degradation during class unloading in\n      \t      Java 8 SR5\n\n- Support Java jnlp files run from Firefox. [bsc#1076390]\n\n","status":"published","published":"2018-03-12T12:16:09Z","modified":"2026-02-04T02:47:32.590934Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0694-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issues:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n              apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n              trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n              converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n              policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ02706 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ03552 Security: IBMPKCS11Impl -- Config file problem with the slot\n              specification attribute\n  - IJ01901 Security: IBMPKCS11Impl -- SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n              stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n* SUSE fixes:\n\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n  - Fixed symlinks to policy files on update [bsc#1085018]\n\n  - Fixed jpackage-java-1_7_1-ibm-webstart.desktop file to allow\n    Java jnlp files run from Firefox. [bsc#1057460, bsc#1076390]\n\n  - Fix javaws segfaults when java expiration timer has elapsed. [bsc#929900]\n\n  - Provide IBM Java updates for IBMs PMR 55931,671,760 and for SUSEs\n    SR 110991601735. [bsc#966304]\n","status":"published","published":"2018-03-15T12:37:08Z","modified":"2026-02-04T04:15:46.712581Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0743-1","title":"Security update for java-1_7_1-ibm","description":"This update for java-1_7_1-ibm fixes the following issue:\n\nThe version was updated to 7.1.4.20 [bsc#1082810]\n\n* Security fixes:\n\n  - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582\n    CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603\n    CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677\n    CVE-2018-2663 CVE-2018-2588 CVE-2018-2579\n\n* Defect fixes:\n\n  - IJ04281 Class Libraries: Startup time increase after applying\n              apar IV96905\n  - IJ03822 Class Libraries: Update timezone information to tzdata2017c\n  - IJ03605 Java Virtual Machine: Legacy security for com.ibm.jvm.dump,\n              trace, log was not enabled by default\n  - IJ03607 JIT Compiler: Result String contains a redundant dot when\n              converted from BigDecimal with 0 on all platforms\n  - IX90185 ORB: Upgrade ibmcfw.jar to version O1800.01\n  - IJ04282 Security: Change in location and default of jurisdiction\n              policy files\n  - IJ03853 Security: IBMCAC provider does not support SHA224\n  - IJ02679 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ02706 Security: IBMPKCS11Impl -- Bad sessions are being allocated\n              internally\n  - IJ03552 Security: IBMPKCS11Impl -- Config file problem with the slot\n              specification attribute\n  - IJ01901 Security: IBMPKCS11Impl -- SecureRandom.setSeed() exception\n  - IJ03801 Security: Issue with same DN certs, iKeyman GUI error with\n              stash, JKS Chain issue and JVM argument parse issue with iKeyman\n  - IJ03256 Security: javax.security.auth.Subject.toString() throws NPE\n  - IJ02284 JIT Compiler: Division by zero in JIT compiler\n\n* SUSE fixes:\n\n  - Make it possible to run Java jnlp files from Firefox. (bsc#1057460)\n\n  - Fixed jpackage-java-1_7_1-ibm-webstart.desktop file to allow\n    Java jnlp files run from Firefox. [bsc#1057460, bsc#1076390]\n\n  - Fix javaws segfaults when java expiration timer has elapsed. [bsc#929900]\n\n  - Provide IBM Java updates for IBMs PMR 55931,671,760 and for SUSEs\n    SR 110991601735. [bsc#966304]\n\n  - Ensure that all Java policy files are symlinked into the proper file system\n    locations. Without those symlinks, several OES iManager plugins did not\n    function properly. [bsc#1085018]\n","status":"published","published":"2018-03-19T13:10:56Z","modified":"2026-02-04T04:15:42.340743Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3613-1","title":"openjdk-8 vulnerabilities","description":"It was discovered that a race condition existed in the cryptography\nimplementation in OpenJDK. An attacker could possibly use this to expose\nsensitive information. (CVE-2018-2579)\n\nIt was discovered that the Hotspot component of OpenJDK did not properly\nvalidate uses of the invokeinterface JVM instruction. An attacker could\npossibly use this to access unauthorized resources. (CVE-2018-2582)\n\nIt was discovered that the LDAP implementation in OpenJDK did not properly\nencode login names. A remote attacker could possibly use this to expose\nsensitive information. (CVE-2018-2588)\n\nIt was discovered that the DNS client implementation in OpenJDK did not\nproperly randomize source ports. A remote attacker could use this to spoof\nresponses to DNS queries made by Java applications. (CVE-2018-2599)\n\nIt was discovered that the Internationalization component of OpenJDK did\nnot restrict search paths when loading resource bundle classes. A local\nattacker could use this to trick a user into running malicious code.\n(CVE-2018-2602)\n\nIt was discovered that OpenJDK did not properly restrict memory allocations\nwhen parsing DER input. A remote attacker could possibly use this to cause\na denial of service. (CVE-2018-2603)\n\nIt was discovered that the Java Cryptography Extension (JCE) implementation\nin OpenJDK in some situations did not guarantee sufficient strength of keys\nduring key agreement. An attacker could use this to expose sensitive\ninformation. (CVE-2018-2618)\n\nIt was discovered that the Java GSS implementation in OpenJDK in some\nsituations did not properly handle GSS contexts in the native GSS library.\nAn attacker could possibly use this to access unauthorized resources.\n(CVE-2018-2629)\n\nIt was discovered that the LDAP implementation in OpenJDK did not properly\nhandle LDAP referrals in some situations. An attacker could possibly use\nthis to expose sensitive information or gain unauthorized privileges.\n(CVE-2018-2633)\n\nIt was discovered that the Java GSS implementation in OpenJDK in some\nsituations did not properly apply subject credentials. An attacker could\npossibly use this to expose sensitive information or gain access to\nunauthorized resources. (CVE-2018-2634)\n\nIt was discovered that the Java Management Extensions (JMX) component of\nOpenJDK did not properly apply deserialization filters in some situations.\nAn attacker could use this to bypass deserialization restrictions.\n(CVE-2018-2637)\n\nIt was discovered that a use-after-free vulnerability existed in the AWT\ncomponent of OpenJDK when loading the GTK library. An attacker could\npossibly use this to execute arbitrary code and escape Java sandbox\nrestrictions. (CVE-2018-2641)\n\nIt was discovered that in some situations OpenJDK did not properly validate\nobjects when performing deserialization. An attacker could use this to\ncause a denial of service (application crash or excessive memory\nconsumption). (CVE-2018-2663)\n\nIt was discovered that the AWT component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing some objects. An\nattacker could use this to cause a denial of service (excessive memory\nconsumption). (CVE-2018-2677)\n\nIt was discovered that the JNDI component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing objects in some\nsituations. An attacker could use this to cause a denial of service\n(excessive memory consumption). (CVE-2018-2678)\n","status":"published","published":"2018-04-02T19:15:32Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3614-1","title":"openjdk-7 vulnerabilities","description":"It was discovered that a race condition existed in the cryptography\nimplementation in OpenJDK. An attacker could possibly use this to expose\nsensitive information. (CVE-2018-2579)\n\nIt was discovered that the LDAP implementation in OpenJDK did not properly\nencode login names. A remote attacker could possibly use this to expose\nsensitive information. (CVE-2018-2588)\n\nIt was discovered that the DNS client implementation in OpenJDK did not\nproperly randomize source ports. A remote attacker could use this to spoof\nresponses to DNS queries made by Java applications. (CVE-2018-2599)\n\nIt was discovered that the Internationalization component of OpenJDK did\nnot restrict search paths when loading resource bundle classes. A local\nattacker could use this to trick a user into running malicious code.\n(CVE-2018-2602)\n\nIt was discovered that OpenJDK did not properly restrict memory allocations\nwhen parsing DER input. A remote attacker could possibly use this to cause\na denial of service. (CVE-2018-2603)\n\nIt was discovered that the Java Cryptography Extension (JCE) implementation\nin OpenJDK in some situations did not guarantee sufficient strength of keys\nduring key agreement. An attacker could use this to expose sensitive\ninformation. (CVE-2018-2618)\n\nIt was discovered that the Java GSS implementation in OpenJDK in some\nsituations did not properly handle GSS contexts in the native GSS library.\nAn attacker could possibly use this to access unauthorized resources.\n(CVE-2018-2629)\n\nIt was discovered that the LDAP implementation in OpenJDK did not properly\nhandle LDAP referrals in some situations. An attacker could possibly use\nthis to expose sensitive information or gain unauthorized privileges.\n(CVE-2018-2633)\n\nIt was discovered that the Java GSS implementation in OpenJDK in some\nsituations did not properly apply subject credentials. An attacker could\npossibly use this to expose sensitive information or gain access to\nunauthorized resources. (CVE-2018-2634)\n\nIt was discovered that the Java Management Extensions (JMX) component of\nOpenJDK did not properly apply deserialization filters in some situations.\nAn attacker could use this to bypass deserialization restrictions.\n(CVE-2018-2637)\n\nIt was discovered that a use-after-free vulnerability existed in the AWT\ncomponent of OpenJDK when loading the GTK library. An attacker could\npossibly use this to execute arbitrary code and escape Java sandbox\nrestrictions. (CVE-2018-2641)\n\nIt was discovered that in some situations OpenJDK did not properly validate\nobjects when performing deserialization. An attacker could use this to\ncause a denial of service (application crash or excessive memory\nconsumption). (CVE-2018-2663)\n\nIt was discovered that the AWT component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing some objects. An\nattacker could use this to cause a denial of service (excessive memory\nconsumption). (CVE-2018-2677)\n\nIt was discovered that the JNDI component of OpenJDK did not properly\nrestrict the amount of memory allocated when deserializing objects in some\nsituations. An attacker could use this to cause a denial of service\n(excessive memory consumption). (CVE-2018-2678)\n","status":"published","published":"2018-04-02T19:17:29Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}
